Directus: Authorization-dependent response served from unsegmented cache key
CVE-2026-61836
## Summary When response caching is enabled (`CACHE_ENABLED=true`), the cache-key derivation in `api/src/utils/get-cach
#advisory
共收录 23779 条相关情报。
← 返回所有主题Directus: SSRF Protection Bypass via 0.0.0.0 in File Import
CVE-2026-61835
### Summary The SSRF protection on Directus's file-import-from-URL feature can be bypassed using the address `0.0.0.0`.
LightRAG is Vulnerable to Authentication Bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection
CVE-2026-61740
## Summary When LightRAG is deployed with `LIGHTRAG_API_KEY` set but `AUTH_ACCOUNTS` unset (an officially documented "A
Guzzle: Proxy-Authorization headers can be sent to origin servers
### Impact In affected versions, the built-in cURL handlers (`CurlHandler` and `CurlMultiHandler`) put every first-clas
LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests
CVE-2026-61736
### Summary The server defaults to CORS_ORIGINS=* combined with allow_credentials=True. Starlette's CORSMiddleware echoe
Mistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution
CVE-2026-59929
## Summary **Type:** URL-scheme allowlist gap. The `safe_url` filter only blocks the four schemes `javascript:`, `vbscr
Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content
CVE-2026-59930
## Summary **Type:** Predictable identifier generation. The `toc` plugin and `TableOfContents` directive both default t
Mistune: Arbitrary File Read via Include directive path traversal
CVE-2026-59924
### Summary A path traversal issue exists in mistune's `Include` directive when markdown files are processed using `md.
Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)
CVE-2026-59922
## Summary **Type:** Algorithmic-complexity denial of service. A run of N closed pairs `~~x~~~~x~~...` (or the analogou
Mistune: XSS via unescaped class option in Admonition directive
CVE-2026-59926
In `src/mistune/directives/admonition.py`, the `render_admonition()` function concatenates the `:class:` option directly
Mistune: XSS via percent-encoded javascript URI bypass in safe_url()
CVE-2026-59923
### Summary An XSS vulnerability in Mistune allows bypassing of safe_url() protections via percent-encoded javascript UR
Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs
CVE-2026-59925
## Summary **Type:** Algorithmic-complexity DoS in core emphasis parsing. A long sequence of well-formed `**x**` (stron
Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java...
CVE-2026-56623
Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and
Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java...
CVE-2026-56624
Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java library for client-side an
Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for...
CVE-2026-58624
Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server
Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java library...
CVE-2026-56452
Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and ser
VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP...
CVE-2026-13380
VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP responses of three unauthent
FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in the IPRateLimit class that...
CVE-2026-64619
FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in the IPRateLimit class that allows unauthenticated a
The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC function...
CVE-2024-51311
The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC function of the file /goform/Se
VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability...
CVE-2026-13381
VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability in the /v1.3.0/api/fil