No description provided
CVE-2026-79878
No description provided
#advisory
共收录 22948 条相关情报。
← 返回所有主题No description provided
CVE-2026-79863
No description provided
No description provided
CVE-2026-79864
No description provided
No description provided
CVE-2026-79855
No description provided
No description provided
CVE-2026-79865
No description provided
No description provided
CVE-2026-79851
No description provided
No description provided
CVE-2026-79866
No description provided
No description provided
CVE-2026-79860
No description provided
No description provided
CVE-2026-79861
No description provided
No description provided
CVE-2026-79859
No description provided
No description provided
CVE-2026-79862
No description provided
virtualenv: Generated files can follow existing destination links
CVE-2026-113721
## Summary Generated activation files and pyvenv.cfg can follow existing links and write outside the requested environm
Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()
### Summary Every Pillow wheel from 11.1.0 onward bundles a libopenjp2 containing a heap-buffer-overflow **write** that
Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive
CVE-2026-114132
## Impact With the default `router.options.sensitive: false`, Nuxt's page router resolves routes case-insensitively, so
Nuxt server islands render `useHeadSafe` input without sanitisation
CVE-2026-114133
## Impact `useHeadSafe` restricts head input to an allowlist of safe tags and attributes. For example, `bodyAttrs` is l
Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled
CVE-2026-114130
## Impact An application that renders `` with a value it does not control can be made to render an anchor whose `href`
Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes
CVE-2026-114131
### Summary Nuxt compared `routeRules` keys against the raw request path, without decoding percent-encoding, while the
pypdf: Possible long runtimes/large memory usage when retrieving form fields
CVE-2026-113789
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage and/or long runtim
pypdf: Possible large memory usage when parsing arrays and dictionaries
CVE-2026-113790
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires par
pypdf: Possible large memory usage when parsing content streams
CVE-2026-113791
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires par