共收录 223 条相关情报。
← 返回所有主题CVE-2026-63346
Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, the header parameter nam
CVE-2026-63344
Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, content-type keys in the
CVE-2026-104368
The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up
CVE-2026-116582
### Summary seroval writes a `RegExp` as a regular expression literal. In affected versions, the `` element that the se
CVE-2026-118257
Vue I18n is the internationalization plugin for Vue.js. From 11.1.10 until 11.4.14 and from 12.0.0-alpha.4 until 12.0.0-
CVE-2026-118256
Vue I18n is the internationalization plugin for Vue.js. From 9.0.0-beta.5 until 11.4.14 and 12.0.0-alpha.5, enabling esc
CVE-2026-110910
### Summary `qs.stringify` with `allowEmptyArrays: true` writes the key of an empty array without encoding it, even t
CVE-2026-116815
OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that allows authenticated projec
CVE-2026-116815
OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that allows authenticated projec
CVE-2026-116582
Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. P
CVE-2026-110725
### Impact `fast-uri`'s `serialize()`, `normalize()`, and `resolve()`, when called with the non-default option `referen
CVE-2026-55442
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 23.0
CVE-2026-57210
Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when the
CVE-2026-114510
Flexible GraphRAG is a Python framework for building graph and retrieval-augmented generation applications across multip
CVE-2026-112949
### Summary `@vitest/mocker`'s `interceptorPlugin` accepts mock registrations on Vite's dev-server WebSocket with no au
CVE-2026-113870
MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editabl
CVE-2026-113870
MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editabl
CVE-2026-113732
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemp
CVE-2026-113726
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.13.0, the bash activate script that
CVE-2026-113867
Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming request