Symfony has Email Header / SMTP Command Injection via CRLF in Symfony\Component\Mime\Address
CVE-2026-45067
### Description `Symfony\Component\Mime\Address` is the value-object every Symfony Mailer address (to/cc/bcc/from/reply
#composer
共收录 517 条相关情报。
← 返回所有主题Symfony has an HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URL-Parser Differentials and <area> Misclassification
CVE-2026-45066
### Description `symfony/html-sanitizer` lets applications sanitise untrusted HTML. The configuration methods `allowLin
Symfony's HtmlSanitizer URL Attributes Pass Through BiDi Override Characters → Visual href Spoofing
CVE-2026-45064
### Description `Symfony\Component\HtmlSanitizer\TextSanitizer\UrlSanitizer::parse()` (used by `UrlSanitizer::sanitize(
Kirby CMS vulnerable to cross-site scripting (XSS) from links in KirbyTags and image blocks in the site frontend
CVE-2026-45368
### TL;DR This vulnerability affects all Kirby sites that allow the use of the `(link: …)` KirbyTag, the `link:` parame
Kirby CMS's content locks disclose IDs and emails of inaccessible users from `users.access/list` permissions
CVE-2026-45334
### TL;DR This vulnerability affects all Kirby sites that restrict the visibility of users for certain roles via the `u
Pimcore: Missing Authorization in WebDAV MOVE via unchecked asset move handling
CVE-2026-45260
### Summary Pimcore's WebDAV asset endpoint exposes a `MOVE` operation through `/asset/webdav{path}` without adding an a
Pimcore has Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restriction
CVE-2026-45162
# GM-374 ## Summary Multiple locations in Pimcore v11 call PHP's `unserialize()` on data from database columns and file
Symfony has a UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection
CVE-2026-45065
### Description Symfony routes can declare a requirements regex per path parameter, e.g. a route `/{_locale}/blog` with
Symfony Vulnerable to Identity Spoofing via Unanchored DN Regex in X509Authenticator
CVE-2026-45063
### Description `X509Authenticator` implements client-certificate (mTLS) authentication: the web server validates the c
Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter
CVE-2026-44741
# GM-369 ## Summary SQL injection in Pimcore's translation grid date filter — the user-supplied `property` field from t
Pimcore Vulnerable to SQL Injection in Custom Reports Column Configuration
CVE-2026-44739
### Summary The columnConfigAction endpoint in the CustomReportsBundle is vulnerable to SQL injection. An attacker with
Kirby CMS has pre-authentication path traversal and PHP file inclusion during user lookup
CVE-2026-44177
### TL;DR This vulnerability affects all Kirby sites on Kirby 5.3.0-5.4.0 and is independent from setup conditions and
Kirby CMS's `pages.access` permission is not checked during rendering of page drafts
CVE-2026-44176
### TL;DR This vulnerability affects all Kirby sites where users of a particular role have no permission to access page
Kirby CMS vulnerable to cross-site scripting (XSS) from list field content in the site frontend
CVE-2026-44175
### TL;DR This vulnerability affects all Kirby sites that use the list field or list block, when content is authored by
Kirby CMS has an Arbitrary Method Call via REST API Search and Collection Query Endpoints
CVE-2026-44174
### TL;DR This vulnerability affects all Kirby sites that might have potential attackers in the group of authenticated
Pterodactyl has a database resource limit bypass via race condition in Client API
CVE-2026-35202
### Summary The Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database alloc
YesWiki: Unauthenticated SQL Injection
CVE-2026-46670
### Summary An unauthenticated SQL injection in the Bazar form-import path (`FormManager::create()`) allows any unauthe
Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation
CVE-2026-46640
### Description The `obj.(expr)` dynamic-attribute syntax (added in 3.15.0 as the replacement for the deprecated `attri
Twig: Sandbox property and method bypass via object-destructuring assignment
CVE-2026-46639
### Description The object-destructuring assignment syntax introduced in Twig 3.24.0 generates a call to `CoreExtension
Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)
CVE-2026-46638
### Description The fix for CVE-2024-45411 / GHSA-6j75-5wfj-gh66 added an explicit `$loaded->unwrap()->checkSecurity()`