Better Auth: Server-side request forgery via unvalidated OIDC endpoints on @better-auth/sso provider registration
CVE-2026-53513
Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the @better-auth/sso plugin'
#cwe-20
共收录 1723 条相关情报。
← 返回所有主题Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching
CVE-2026-59954
Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior
Apollo ConfigService access key authentication bypass via raw config file appId parsing
CVE-2026-59955
Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior
PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key option defaults to None, and the server only enforces Authoriz...
CVE-2026-61427
PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key optio
Open WebUI before 0.9.5 contains a stored cross-site scripting vulnerability in the OAuth authentication flow where the picture claim URL MIME type is inferred from file extensi...
CVE-2026-56398
Open WebUI before 0.9.5 contains a stored cross-site scripting vulnerability in the OAuth authentication flow where the
n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypass default guardrail instructions. End users can craft ma...
CVE-2026-56349
n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypa
PraisonAI before 4.6.78 Authentication Bypass via HTTP-stream
CVE-2026-61427
PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key optio
Open WebUI - Stored Cross-Site Scripting via OAuth Picture Claim SVG Data URI
CVE-2026-56398
Open WebUI before 0.9.5 contains a stored cross-site scripting vulnerability in the OAuth authentication flow where the
n8n - Guardrail Node Bypass via Crafted Input
CVE-2026-56349
n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypa
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead...
CVE-2026-48353
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file syst
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could...
CVE-2026-48351
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application de
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could...
CVE-2026-48352
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application de
Illustrator is affected by an Improper Input Validation vulnerability that could result in...
CVE-2026-48334
Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in t
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could...
CVE-2026-48312
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could...
CVE-2026-48302
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application de
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to ...
CVE-2026-48353
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file syst
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabi...
CVE-2026-48352
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application de
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabi...
CVE-2026-48351
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application de
Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu...
CVE-2026-48334
Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in t
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability t...
CVE-2026-48312
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur