共收录 223 条相关情报。
← 返回所有主题CVE-2026-44496
Axios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and befor
CVE-2026-42567
Svelte is a performance oriented web framework. From version 5.51.5 to before version 5.55.7, an internal regex in the S
CVE-2026-41848
Applications may be vulnerable to a Regular Expression Denial of Service (ReDoS) attack if an attacker is able to provid
CVE-2026-52778
YesWiki is a wiki system written in PHP. Prior to version 4.6.6, an unsafe execution vulnerability exists in the Bazar f
CVE-2026-11478
A flaw has been found in kokke tiny-regex-c up to f2632c6d9ed25272987471cdb8b70395c2460bdb. This vulnerability affects t
CVE-2026-45409
Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in
CVE-2026-10692
CVE-2026-10692 影响 johnhuang316 开发的 code-index-mcp 组件（版本 <= 2.14.0）。该漏洞存在于 search_code_advanced 组件的 is_safe_regex_pattern
CVE-2026-10691
在 wonderwhy-er DesktopCommanderMCP 至 0.2.38 版本中存在安全漏洞，影响 src/search-manager.ts 文件中的 start_search 组件。攻击者可通过操纵 SearchResul
CVE-2026-10291
A security vulnerability has been detected in Enderfga claw-orchestrator up to 3.7.0. The impacted element is the functi
CVE-2026-44796
Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot UI object-bul
CVE-2026-45305
### Description `Symfony\Component\Yaml\Parser::cleanup()` strips the optional `%YAML` directive header, leading commen
CVE-2026-45133
### Description `Symfony\Component\Yaml\Parser` is the entry point for parsing YAML strings into PHP values via `Yaml::
CVE-2026-45617
## Summary The built-in `strip_html` filter in liquidjs uses a regex containing four lazy-quantified alternatives. When
CVE-2026-9496
Versions of the package pacote from 11.2.7 are vulnerable to Denial of Service (DoS) via the addGitSha function. An atta
CVE-2026-47138
### Impact An unauthenticated attacker who knows a publicly-known Parse Application ID can submit a single HTTP request
CVE-2026-45367
## Summary All implementations of FHIRPathEngine accept arbitrary FHIRPath expressions and evaluate them without input
CVE-2026-8159
### Impact multiparty@4.2.3 and lower versions are vulnerable to denial of service via regular expression backtracking
CVE-2026-42567
An internal regex in the Svelte runtime can take exponential time to test in ``. You are only vulnerable to this if you
CVE-2026-44425
ShellHub is a centralized SSH gateway. Prior to 0.24.2, the device list endpoint accepts user-controlled identifiers in
CVE-2026-44796
### Impact Nautobot UI object-bulk-rename endpoints (for example, `/dcim/interfaces/rename/`) were vulnerable to applic