GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count

## Summary `Commit.count()` forwards `**kwargs` into `rev_list` with **no** `check_unsafe_options` guard (the guard exis

历史摘要 · 未重新核验 · GitHub Advisory

GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()

**Target:** gitpython-developers/GitPython **Tested:** HEAD `07e80555` (2026-07-25), latest release 3.1.55, `git version

历史摘要 · 未重新核验 · GitHub Advisory

GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read

**Target:** gitpython-developers/GitPython **Tested:** HEAD `07e80555` (2026-07-25), latest release 3.1.55, `git version

历史摘要 · 未重新核验 · GitHub Advisory

ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass

CVE-2026-69192

### Summary `Address4` accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL hos

历史摘要 · 未重新核验 · GitHub Advisory

ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks

CVE-2026-69198

### Summary Every special-use classification method is built on `isInSubnet`, which short-circuits to `false` whenever

历史摘要 · 未重新核验 · GitHub Advisory

ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks

CVE-2026-54272

### Summary `Address6`'s special-property checks misclassify IPv4-mapped (`::ffff:0:0/96`) and NAT64 well-known (`64:ff

历史摘要 · 未重新核验 · GitHub Advisory

undici vulnerable to CRLF Injection via blob-like body 'type' property

CVE-2026-15157

### Impact When an application passes a duck-typed blob-like body to undici's HTTP/1.1 dispatcher (via `request()`, `st

历史摘要 · 未重新核验 · GitHub Advisory

undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives

CVE-2026-14643

## Impact Undici's cache interceptor mishandles optional whitespace (OWS) placed around the `=` of a qualified `no-cach

历史摘要 · 未重新核验 · GitHub Advisory

undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields

CVE-2026-16729

## Impact The `setCookie` function has two attribute injection paths. `validateCookieDomain` does not reject semicolons

历史摘要 · 未重新核验 · GitHub Advisory

undici vulnerable to downstream response desynchronization via retry interceptor

CVE-2026-16728

### Impact Undici's `interceptors.retry()` can deliver a response whose body length does not match the `Content-Length`

历史摘要 · 未重新核验 · GitHub Advisory

undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives

CVE-2026-13697

### Summary Two issues in undici's cache interceptor, both fixed by the same patch on `lib/util/cache.js`: 1. **Shared

历史摘要 · 未重新核验 · GitHub Advisory

fast-uri vulnerable to host confusion via backslash authority introducer

CVE-2026-18446

### Impact `fast-uri` v4.1.1 and earlier require a literal `//` to recognize a URI authority, so a reference that uses

历史摘要 · 未重新核验 · GitHub Advisory

Socket.IO: Zero-attachment Memory Exhaustion

CVE-2026-69185

### Impact A specially crafted Socket.IO packet can make the server wait for a large number of binary attachments and b

历史摘要 · 未重新核验 · GitHub Advisory

PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset

CVE-2026-69153

## Summary The fix for GHSA-6g55-p6wh-862q added a guard in `lib/previous-map.js` `PreviousMap.loadFile()` that restric

历史摘要 · 未重新核验 · GitHub Advisory

brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

CVE-2026-69152

### Summary The `maxLength` mitigation added in `5.0.8` for GHSA-mh99-v99m-4gvg / CVE-2026-14257 is incomplete. It boun

历史摘要 · 未重新核验 · GitHub Advisory

Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

CVE-2026-69151

A Cross-Site Scripting (XSS) vulnerability has been identified in the Angular compiler's internationalization (i18n) pip

历史摘要 · 未重新核验 · GitHub Advisory

Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

CVE-2026-69149

A Cross-Site Scripting (XSS) vulnerability exists in `@angular/platform-server`'s DOM emulation dependency (`domino`) wh

历史摘要 · 未重新核验 · GitHub Advisory

Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

CVE-2026-68945

Angular's `HttpTransferCache` caches HTTP requests made during Server-Side Rendering (SSR) so that they can be reused du

历史摘要 · 未重新核验 · GitHub Advisory

Russh: Channel-scoped server callbacks can be reached without an open channel

CVE-2026-68930

There is a server-side channel state issue in `russh`. After a client is authenticated, `russh` can dispatch channel-sc

历史摘要 · 未重新核验 · GitHub Advisory

【TDSQL-C MySQL 版】关于产品架构2.0计费的公告

【TDSQL-C MySQL 版】关于产品架构2.0计费的公告

历史摘要 · 未重新核验 · 腾讯云安全公告