Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the...
CVE-2026-77936
Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never
#advisory
共收录 22969 条相关情报。
← 返回所有主题DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the ...
CVE-2026-77932
DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agen
Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any...
CVE-2026-75128
Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name with
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow...
CVE-2026-77935
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenti
A race condition was addressed with additional validation. This issue is fixed in macOS Golden...
CVE-2026-65372
A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15
Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin...
CVE-2026-77926
Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating s
Letta through 0.16.8 contains an information disclosure vulnerability that allows users running...
CVE-2026-77938
Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server sec
The issue was addressed with improved handling of secure input state. This issue is fixed in...
CVE-2026-65379
The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS...
CVE-2026-65396
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoi
Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to...
CVE-2026-77937
Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users
EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers...
CVE-2026-77930
EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell comman
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered...
CVE-2026-77934
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands
OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows...
CVE-2026-109444
OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run
piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat...
CVE-2026-109442
piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat
JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated...
CVE-2026-109443
JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating
An access issue was addressed with improved access controls. This issue is fixed in macOS Golden...
CVE-2026-65356
An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia
The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS...
CVE-2026-28854
The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A mali
An authorization issue was addressed with improved state management. This issue is fixed in...
CVE-2026-28850
An authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be a
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS...
CVE-2026-28853
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be
Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits...
CVE-2026-105297
Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set i