#cwe-150

共收录 53 条相关情报。

漏洞预警2026-10-28 发布MEDIUM

Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row formatters pass Caddy access-log fields, particularly the ...

CVE-2026-54162

Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row f

来源摘录 · NVD

#cve #cwe-150

漏洞预警2026-10-12 发布INFO

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in hexpm hex allows a malicious package publisher or a hostile repository server to inject terminal c...

CVE-2026-81856

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in hexpm hex allows a malicious package publ

历史摘要 · 未重新核验 · NVD

#cve #cwe-150

安全公告2026-10-06 发布INFO

openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

CVE-2026-105801

### Impact A malicious OpenAPI document processed by any `openapi-python-client` prior to 0.29.1 can generate arbitrary

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-94 #cwe-116 #cwe-150 #severity:high

漏洞预警2026-10-06 发布INFO

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before render...

CVE-2026-105801

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely ne

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-116 #cwe-150

漏洞预警2026-10-02 发布INFO

In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, co...

CVE-2026-104026

In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A mali

历史摘要 · 未重新核验 · NVD

#cve #cwe-150

漏洞预警2026-10-01 发布INFO

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local ...

CVE-2026-103431

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote c

历史摘要 · 未重新核验 · NVD

#cve #cwe-150

安全公告2026-10-01 发布INFO

Collectl: collectl: colmux does not sanitize ansi/vt100 terminal escape sequences in data received from remote collectl instances

CVE-2026-103431

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote c

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-150

漏洞预警2026-09-29 发布INFO

Flysystem is an open source file storage library for PHP. Prior to 3.35.3, the default WhitespacePathNormalizer in src/WhitespacePathNormalizer.php used by Filesystem across ada...

CVE-2026-102601

Flysystem is an open source file storage library for PHP. Prior to 3.35.3, the default WhitespacePathNormalizer in src/W

历史摘要 · 未重新核验 · NVD

#cve #cwe-150

安全公告2026-09-29 发布INFO

Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapter

CVE-2026-102601

Flysystem is an open source file storage library for PHP. Prior to 3.35.3, the default WhitespacePathNormalizer in src/W

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-150

安全公告2026-09-27 发布INFO

spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest...

CVE-2026-100867

spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before renderi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-150 #severity:medium

安全公告2026-09-27 发布INFO

onefetch through 2.28.1 writes repository information field values to the terminal without...

CVE-2026-100866

onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters,

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-150 #severity:medium

漏洞预警2026-09-27 发布INFO

spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before rendering them in the zsh prompt. Attackers can embed ANSI/OSC e...

CVE-2026-100867

spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before renderi

历史摘要 · 未重新核验 · NVD

#cve #cwe-150

漏洞预警2026-09-27 发布INFO

onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers ca...

CVE-2026-100866

onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters,

历史摘要 · 未重新核验 · NVD

#cve #cwe-150

安全公告2026-09-27 发布INFO

spaceship-prompt through 4.22.5 Terminal Escape Sequence Injection

CVE-2026-100867

spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before renderi

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-150

安全公告2026-09-27 发布INFO

onefetch through 2.28.1 Terminal Escape Sequence Injection

CVE-2026-100866

onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters,

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-150

漏洞预警2026-09-23 发布INFO

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.4, the unauthenticated /csp endpoint passes attacker-controlled document-uri, ...

CVE-2026-93421

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.4, the unauthenticated /_

历史摘要 · 未重新核验 · NVD

#cve #cwe-117 #cwe-150

安全公告2026-09-23 发布INFO

Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint

CVE-2026-93421

### Summary The `/__csp__` endpoint accepts unauthenticated JSON reports and logs user-controlled values directly to st

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-117 #cwe-150 #severity:medium

安全公告2026-09-23 发布INFO

Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint

CVE-2026-93421

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.4, the unauthenticated /_

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-117 #cwe-150

漏洞预警2026-09-08 发布INFO

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usage_rules allows a malicious package publisher to inject terminal control sequences ...

CVE-2026-82710

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usage_rules allows a maliciou

历史摘要 · 未重新核验 · NVD

#cve #cwe-150

漏洞预警2026-09-07 发布INFO

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project igniter allows a malicious package publisher to forge the mix igniter.install confirma...

CVE-2026-82584

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project igniter allows a malicious pa

历史摘要 · 未重新核验 · NVD

#cve #cwe-150