skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source

### Impact `skilo add` installs a skill by recursively copying the skill directory into the target skills directory. Th

历史摘要 · 未重新核验 · GitHub Advisory

Style Dictionary - Prototype Pollution in convertTokenData utility function

CVE-2026-54639

### Impact Prototype pollution. A malicious user can create a token array `[{ key: '{__proto__.foo}', value: 'malicious'

历史摘要 · 未重新核验 · GitHub Advisory

openhole-server vulnerable to path traversal via URL-decoded request path

CVE-2026-54650

## Summary openhole-server forwarded the URL-decoded request path (`r.URL.Path`) to tunnel clients instead of the origi

历史摘要 · 未重新核验 · GitHub Advisory

@hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution

CVE-2026-54658

### Impact A SQL injection vulnerability exists in the `escapeValue()` function used for parameter substitution. Attack

历史摘要 · 未重新核验 · GitHub Advisory

td has pre-auth denial of service via unbounded memory allocation in proto.UnencryptedMessage.Decode

CVE-2026-54638

### Impact A remote, unauthenticated attacker can cause excessive memory allocation (and resulting CPU / GC pressure, p

历史摘要 · 未重新核验 · GitHub Advisory

goshs has a Path Traversal issue

CVE-2026-66063

## Summary The multipart upload filename fix splits on the path separator but never rejects dot-dot, allowing a write o

历史摘要 · 未重新核验 · GitHub Advisory

goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite

CVE-2026-64863

## Summary The WebDAV mode-flag guard added to fix GHSA-3whc-qvhv-xqjp still does not enforce `--no-delete` on the WebD

历史摘要 · 未重新核验 · GitHub Advisory

goshs: File-based .goshs ACL authorization bypass via the ?bulk zip-download route (unauthenticated read; residual of GHSA-wvhv-qcqf-f3cx)

CVE-2026-54719

GHSA-wvhv-qcqf-f3cx fixed the per-folder .goshs ACL bypass on the state-changing routes (PUT/POST upload/?mkdir/?delete)

历史摘要 · 未重新核验 · GitHub Advisory

goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)

CVE-2026-62325

## Summary Start goshs v2.1.3 with `-b 'admin:' -sftp`. No `-fkf`. SFTP accepts connections without password. CVE-2026-

历史摘要 · 未重新核验 · GitHub Advisory

`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` field

CVE-2026-54654

### Summary `datamodel-code-generator` is vulnerable to code injection when a developer passes an `--extra-template-dat

历史摘要 · 未重新核验 · GitHub Advisory

datamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (`file://` and `../` traversal), bypassing `--no-allow-remote-refs`

CVE-2026-55389

### Summary `datamodel-code-generator` resolves JSON-Schema `$ref` targets that point at the local filesystem without r

历史摘要 · 未重新核验 · GitHub Advisory

`datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field

CVE-2026-54653

### Summary `datamodel-code-generator` is vulnerable to code injection when generating Python models from an attacker-c

历史摘要 · 未重新核验 · GitHub Advisory

datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding

CVE-2026-55391

### Summary `datamodel-code-generator`'s anti-SSRF guard validates the resolved IP of a fetch target once and then lets

历史摘要 · 未重新核验 · GitHub Advisory

`datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-data

CVE-2026-54656

### Summary When the Pydantic v2 output mode is in use, `datamodel-code-generator` reads a `validators` array from each

历史摘要 · 未重新核验 · GitHub Advisory

datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default)

CVE-2026-54690

### Summary JSON-Schema `$ref` values pointing at HTTP or HTTPS URLs are silently dereferenced by `datamodel-code-gener

历史摘要 · 未重新核验 · GitHub Advisory

datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements

CVE-2026-55415

#### Summary A malicious input schema (OpenAPI / JSON Schema) can execute arbitrary Python code on the machine that **i

历史摘要 · 未重新核验 · GitHub Advisory

`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in GraphQL Union description

CVE-2026-54621

### Summary `datamodel-code-generator` is vulnerable to code injection when generating Python models from an attacker-c

历史摘要 · 未重新核验 · GitHub Advisory

`datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON-Schema extension in datamodel-code-generator

CVE-2026-54655

### Summary `datamodel-code-generator` honours a custom `x-python-type` JSON-Schema extension that lets a schema author

历史摘要 · 未重新核验 · GitHub Advisory

datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas

CVE-2026-55403

### Summary When `datamodel-code-generator` fetches a remote schema and follows an HTTP redirect, it re-sends the origi

历史摘要 · 未重新核验 · GitHub Advisory

In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive...

CVE-2026-16581

In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulner

历史摘要 · 未重新核验 · GitHub Advisory