MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
CVE-2026-69148
### Summary The `_validate_source_run` and `_validate_source_model` functions in `mlflow/server/handlers.py` verify tha
#advisory
共收录 23530 条相关情报。
← 返回所有主题MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
CVE-2026-69146
### Summary When MLflow is deployed with the built-in basic-auth plugin (`--app-name basic-auth`), any authenticated us
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
CVE-2026-64849
### Summary The default MLflow Tracking Server (`mlflow server`, no authentication, default SQLite backend) exposes the
9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint
CVE-2026-56677
### Summary A Server-Side Request Forgery (SSRF) vulnerability exists in the 9Router dashboard via the `/api/auth/oidc/
http4k: `DigestAuthProvider.verify` did not bind to request URI
CVE-2026-54148
### Impact An issue in `DigestAuthProvider.verify`: The `uri` parameter in the client's `Authorization: Digest …` resp
http4k: `DigestAuthProvider.verify` ignored configured algorithm and did not bind to request URI
CVE-2026-54147
### Impact An issue in `DigestAuthProvider.verify`: **Algorithm silently forced to MD5.** The configured `algorithm`
chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots
CVE-2026-53766
### Summary I originally reported this through Google Bug Hunters. The Google Bug Hunters team said this is in OSS VRP
package pkcs12: Authentication bypass in Decode functions
`Decode`, `DecodeChain`, `DecodeTrustStore`, and `ToPEM` can incorrectly accept PKCS#12 files which were encoded with th
docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service
CVE-2026-53752
### Summary docx4j's `PropertyResolver` and several adjacent helpers recursively walk the OpenXML style inheritance chai
http4k: Unbounded gzip decompression in `ServerFilters.GZip` / `RequestFilters.GunZip` allowed memory-exhaustion DoS
CVE-2026-53659
### Impact `ServerFilters.GZip` and `RequestFilters.GunZip` (and the underlying `Gzip` functions used to decompress req
atomic-agents-stack: Parallel helper/delegate batch reserves $0 for models absent from the pricing table, bypassing the cost-cap fan-out guard
`_estimate_batch_cost` (`atomic_agents/agent.py`) looks up the per-model output price with `PRICING.get(model, {})`, ret
atomic-agents-stack: HTTP MCP catalog accepts cleartext http and spawns catalog-supplied commands (MITM to RCE)
The HTTP MCP server-registry backend factory (`atomic_agents/mcp_registry/http.py`, `make_http_mcp_server_registry_backe
MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is...
CVE-2026-75110
MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=
SWE-agent's trajectory inspector (sweagent inspector), confirmed in v1.1.0, is an HTTP server...
CVE-2026-75482
SWE-agent's trajectory inspector (sweagent inspector), confirmed in v1.1.0, is an HTTP server that joins request paths t
JimuReport contains an authentication bypass vulnerability in the report folder template listing...
CVE-2026-75479
JimuReport contains an authentication bypass vulnerability in the report folder template listing endpoint that allows un
OpenViking debug vector scroll and count endpoints apply only account-level scoping without user...
CVE-2026-75480
OpenViking debug vector scroll and count endpoints apply only account-level scoping without user-level access controls,
powerlevel10k fails to neutralize control characters in the package.json version field when...
CVE-2026-75483
powerlevel10k fails to neutralize control characters in the package.json version field when rendering the package prompt
Evidently UI fails to properly validate the filename parameter in the dataset materialization...
CVE-2026-75111
Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthe
SkyPilot fails to validate that authenticated users are entitled to grant administrator roles...
CVE-2026-75481
SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service acco
OpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an...
CVE-2026-75106
OpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an empty default salt, al