MCP PHP SDK: client HttpTransport SSE buffer (sseBuffer .= chunk) grows unbounded when server withholds the event delimiter

CVE-2026-53965

## Summary The HTTP client transport in `mcp/sdk` reads a Server-Sent-Events (SSE) response stream incrementally and ap

历史摘要 · 未重新核验 · GitHub Advisory

Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)

CVE-2026-53964

### Impact A remote code execution (RCE) via server-side template injection (SSTI) allows for user supplied code to be e

历史摘要 · 未重新核验 · GitHub Advisory

Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint

CVE-2026-53957

### Summary `export_space` and `import_space` tools in `@contentful/mcp-tools` accept LLM-controlled `host` and `proxy`

历史摘要 · 未重新核验 · GitHub Advisory

Copier has a trust-prefix bypass via path traversal that runs tasks unprompted

CVE-2026-53951

# Copier: trust-prefix bypass via path traversal runs tasks unprompted ### Summary In copier `>= 9.5.0, str: if u

历史摘要 · 未重新核验 · GitHub Advisory

Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS

CVE-2026-53941

## Summary An unprivileged container can block all other containers from starting on the same host by placing a crafted

历史摘要 · 未重新核验 · GitHub Advisory

block_buffer: panic corrupts inline buffer position

### Summary A caught panic may leave the cursor position of `EagerBuffer` or `ReadBuffer` in a corrupted state; this in

历史摘要 · 未重新核验 · GitHub Advisory

claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

### Summary `claude-faf-mcp` MCP tools accept a caller-controlled `path` argument and resolve it (`~` expansion + `path.

历史摘要 · 未重新核验 · GitHub Advisory

faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

### Summary `faf-mcp` MCP tools accept a caller-controlled `path` argument and resolve it (`~` expansion + `path.resolve

历史摘要 · 未重新核验 · GitHub Advisory

grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools

### Summary Several `grok-faf-mcp` MCP tools accept a caller-controlled `path` argument and resolve it (`~` expansion +

历史摘要 · 未重新核验 · GitHub Advisory

langgraph-api: Incomplete assistant authorization in LangGraph Server run creation

CVE-2026-55236

## Summary In affected versions of `langgraph-api` (the LangGraph Server runtime), the run-creation path authorized the

历史摘要 · 未重新核验 · GitHub Advisory

langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication

CVE-2026-55235

## Summary In affected versions of `langgraph-api` (the LangGraph Server runtime), a run or cron could be created with

历史摘要 · 未重新核验 · GitHub Advisory

A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations...

CVE-2026-43961

A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can brea

来源摘录 · NVD / OSV.dev

【腾讯云认证】腾讯云架构高级工程师认证升级公告

【腾讯云认证】腾讯云架构高级工程师认证升级公告

历史摘要 · 未重新核验 · 腾讯云安全公告

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy...

CVE-2026-75976

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wa

历史摘要 · 未重新核验 · GitHub Advisory

A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. The...

CVE-2026-75978

A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. The affected element is the

历史摘要 · 未重新核验 · GitHub Advisory

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...

CVE-2026-66603

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Artiss Draft

历史摘要 · 未重新核验 · GitHub Advisory

Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar...

CVE-2026-66602

Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Reque

历史摘要 · 未重新核验 · GitHub Advisory

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...

CVE-2026-27365

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress Publi

历史摘要 · 未重新核验 · GitHub Advisory

The PPWP: Password Protect Pages, Posts & Full or Partial Content plugin for WordPress is...

CVE-2025-11729

The PPWP: Password Protect Pages, Posts & Full or Partial Content plugin for WordPress is vulnerable to unauthorized acc

历史摘要 · 未重新核验 · GitHub Advisory

Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly...

CVE-2026-66589

Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Sec

历史摘要 · 未重新核验 · GitHub Advisory