共收录 62800 条相关情报。
← 返回所有主题CVE-2026-117680
Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in lud
CVE-2026-120308
A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path
CVE-2026-120307
The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's
CVE-2026-120306
Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on t
CVE-2026-120227
A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the file stat
CVE-2026-120226
A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Affected by t
CVE-2026-13575
HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Sessio
CVE-2026-120225
A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the function con
CVE-2026-120224
A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function run_apis_by_json/run
CVE-2026-120263
When `[oauth2_client].ACCOUNT_LINKING` is set to `auto` (not the default) and registration is enabled, the link-account
CVE-2026-120223
A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function session_get of the file
CVE-2026-119627
The web profile and RSS/Atom feed routes of users and organizations checked only whether a signed-in viewer could see a
CVE-2026-119625
The `/{username}` web route accepted personal access tokens over HTTP Basic authentication without checking their scope.
CVE-2026-119533
Repository and organization project boards listed the pull requests that reference each issue on the board without check
CVE-2026-119441
`DELETE /api/v1/orgs/{org}/repos` deletes all repositories of an organization, but it did not enforce the public-only re
CVE-2026-118504
The web interface blocks issue and pull request changes on archived repositories, but several issue routes of the REST A
CVE-2026-118395
Gitea 1.27.3 stopped personal access tokens restricted to public resources (`public-only`) from creating repositories th
CVE-2026-118394
The OAuth2 userinfo endpoint (`/login/oauth/userinfo`) decided whether to limit the `groups` claim to public organizatio
CVE-2026-118386
Workflows triggered by a pull request review were read from the commit named in the review's `commit_id`, while the fork
CVE-2026-117685
The OCI registry's cross-repository blob mount checked the target package against the token's `public-only` restriction,