etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline

### Impact _What kind of vulnerability is it? Who is impacted?_ A network attacker who can reach an etcd TLS listener c

历史摘要 · 未重新核验 · GitHub Advisory

FrontMCP: Server-Side Request Forgery (SSRF) in the OpenAPI adapter spec-change poller

## Summary The OpenAPI adapter's spec-change **poller** (`OpenApiSpecPoller`) re-fetched the configured spec `url` on a

历史摘要 · 未重新核验 · GitHub Advisory

kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema

| Field | Value | |---|---| | Ecosystem | Go | | Package | `github.com/getkin/kin-openapi` | | Affected versions | `<= 0

历史摘要 · 未重新核验 · GitHub Advisory

AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()

CVE-2026-16796

### Summary The AWS Bedrock AgentCore Python SDK (bedrock-agentcore) provides tools for building AI agents, including a

历史摘要 · 未重新核验 · GitHub Advisory

etcd: Watch API authorization bypass via open-ended range requests

### Impact _What kind of vulnerability is it? Who is impacted?_ A user granted READ permission on a single, exact key c

历史摘要 · 未重新核验 · GitHub Advisory

Smithy-RS: Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

CVE-2026-16756

## Summary Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy

历史摘要 · 未重新核验 · GitHub Advisory

libp2p: yamux connection DoS via oversized data frame

### Summary The yamux stream multiplexer in py-libp2p does not validate incoming DATA frame lengths against the receive

历史摘要 · 未重新核验 · GitHub Advisory

Quasar: Prototype pollution in the extend() utility

### Summary `quasar@2.20.1`, the latest published version at the time of testing, appears to be vulnerable to prototype

历史摘要 · 未重新核验 · GitHub Advisory

Oh My Posh: Arbitrary command execution via template injection in the path segment

### Summary Oh My Posh re-renders the resolved path string, which contains the raw folder names taken from the filesyste

历史摘要 · 未重新核验 · GitHub Advisory

Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data

### Summary Oh My Posh renders dynamic, potentially attacker-controlled strings (the current directory name, Git commit

历史摘要 · 未重新核验 · GitHub Advisory

OmniFaces: Forged combined-resource IDs and related output/push boundaries

## 1. Forged combined-resource IDs `CombinedResourceInfo` accepts a path-derived ID without an authenticity check, infla

历史摘要 · 未重新核验 · GitHub Advisory

Shescape: Quadratic-time denial of service in the flag-protection

### Impact This impacts users of Shescape that have flag protection enabled, which is on by default, regardless of the

历史摘要 · 未重新核验 · GitHub Advisory

Shescape: Home-directory disclosure in assignment context on Unix with Dash

### Impact This impacts users of Shescape on Unix systems that explicitly configure `shell` to Dash, or `true` when the

历史摘要 · 未重新核验 · GitHub Advisory

Shescape: Shell injection via unescaped parentheses on Windows with CMD

### Impact This impacts users of Shescape on Windows that explicitly configure `shell` to CMD, or `true` with the defau

历史摘要 · 未重新核验 · GitHub Advisory

Shescape: Path disclosure on Unix with Zsh

### Impact This impacts users of Shescape on Unix systems that explicitly configure `shell` to Zsh, or `true` when the

历史摘要 · 未重新核验 · GitHub Advisory

AWS API MCP Server Security Policy Bypass via Startup Initialization Failure

CVE-2026-16584

## Summary The AWS API MCP Server is an open source Model Context Protocol (MCP) server that enables AI assistants to in

历史摘要 · 未重新核验 · GitHub Advisory

OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API

### Summary An authorization bypass vulnerability exists in the file sharing mechanism of `Openlist`. Due to a flawed, n

历史摘要 · 未重新核验 · GitHub Advisory

OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search

### Summary An authorization bypass and information disclosure vulnerability exists in the search API of `Openlist`. Due

历史摘要 · 未重新核验 · GitHub Advisory

OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal

### Summary The `/api/fs/batch_rename` handler validates and authorizes only the requested source directory. It rejects

历史摘要 · 未重新核验 · GitHub Advisory

blaze: Unbounded WebSocket message aggregation in http4s-blaze-server

## Summary `http4s-blaze-server` aggregates the fragments of an incoming WebSocket message with no limit on total size

历史摘要 · 未重新核验 · GitHub Advisory