open-websearch has SSRF in `fetchWebContent` MCP tool: bracketed IPv6 literals and non-resolving hostname check bypass `isPrivateOrLocalHostname`

CVE-2026-42260

### Summary `src/utils/urlSafety.ts` exposes `isPublicHttpUrl` / `assertPublicHttpUrl`, used to gate the MCP `fetchWebCo

历史摘要 · 未重新核验 · GitHub Advisory

Sandboxie is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a local denial of service vulnerability exists in the Sandboxie kernel ...

CVE-2026-32603

Sandboxie is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a local denial

历史摘要 · 未重新核验 · NVD

A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditions involving dropped packets and ou...

CVE-2026-6180

A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under spe

历史摘要 · 未重新核验 · NVD

CI4MS Vulnerable to Arbitrary Database Table Drop via Theme deleteProcess

CVE-2026-41890

### Summary The `deleteProcess()` action accepts a POST parameter `tables[]` containing arbitrary table names. These are

历史摘要 · 未重新核验 · GitHub Advisory

pyp2spec is Vulnerable to Code Injection

CVE-2026-42301

### Impact pyp2spec was writing PyPI package metadata (e.g. the summary field) into the generated spec file without esca

历史摘要 · 未重新核验 · GitHub Advisory

In Apache Iceberg, the table's metadata files are control files: they tell readers which data files belong to the table and which table version to read. `write.metadata.path`...

CVE-2026-42812

In Apache Iceberg, the table's metadata files are control files: they tell readers which data files belong to the table

历史摘要 · 未重新核验 · NVD

In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for one table's files, but a crafted namespace or table name can cause those crede...

CVE-2026-42811

In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for one table's files, bu

历史摘要 · 未重新核验 · NVD

Apache Polaris accepts literal `*` characters in namespace and table names. When it later builds temporary S3 access policies for delegated table access, those same characters a...

CVE-2026-42810

Apache Polaris accepts literal `*` characters in namespace and table names. When it later builds temporary S3 access pol

历史摘要 · 未重新核验 · NVD

Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation before the effective table location has been validated or durably reserved. ...

CVE-2026-42809

Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation before the effectiv

历史摘要 · 未重新核验 · NVD

A security vulnerability has been detected in MindsDB up to 26.01. Affected is the function...

CVE-2026-7712

A security vulnerability has been detected in MindsDB up to 26.01. Affected is the function pickle.loads of the componen

历史摘要 · 未重新核验 · GitHub Advisory

A security vulnerability has been detected in MindsDB up to 26.01. Affected is the function pickle.loads of the component Pickle Handler. The manipulation leads to deserializati...

CVE-2026-7712

A security vulnerability has been detected in MindsDB up to 26.01. Affected is the function pickle.loads of the componen

历史摘要 · 未重新核验 · NVD

A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function...

CVE-2026-7669

A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function get_tokenizer of the file pytho

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function get_tokenizer of the file python/sglang/srt/utils/hf_transformers_utils.py of the compon...

CVE-2026-7669

CVE-2026-7669 是 sgl-project 开发的 SGLang 框架中的一个反序列化漏洞，影响版本 0.5.9 及之前的所有版本。该漏洞位于 HuggingFace Transformer Handler 组件的 python

历史摘要 · 未重新核验 · NVD

A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load...

CVE-2026-7597

A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem0/vector_stores/faiss.py. Performing a manipulation resul...

CVE-2026-7597

该漏洞存在于 mem0ai 的 mem0 库（版本 ≤1.0.11）中，位于文件 mem0/vector_stores/faiss.py 的 pickle.load/pickle.dump 函数内。攻击者可通过向受影响端点发送特制的恶意序列

历史摘要 · 未重新核验 · NVD

An issue in the component DirectIo64.sys of PassMark BurnInTest v11.0 Build 1011, OSForensics v11...

CVE-2025-52347

An issue in the component DirectIo64.sys of PassMark BurnInTest v11.0 Build 1011, OSForensics v11.1 Build 1007, and Perf

历史摘要 · 未重新核验 · GitHub Advisory

An issue in the component DirectIo64.sys of PassMark BurnInTest v11.0 Build 1011, OSForensics v11.1 Build 1007, and PerformanceTest v11.1 Build 1004 allows attackers to access k...

CVE-2025-52347

An issue in the component DirectIo64.sys of PassMark BurnInTest v11.0 Build 1011, OSForensics v11.1 Build 1007, and Perf

历史摘要 · 未重新核验 · NVD

ps_checkout allows unauthorized method invocation through unvalidated parameter

### Impact Unvalidated parameter can lead to some unauthorized method invocation with very little possibilities. ### P

历史摘要 · 未重新核验 · GitHub Advisory

Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege...

CVE-2026-5174

Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation. This issue

历史摘要 · 未重新核验 · GitHub Advisory

Weblate Vulnerable to Authenticated SSRF via Project Backup Import bypassing validate_repo_url

CVE-2026-41654

### Impact An authenticated user with `project.add` permission (default on hosted Weblate SaaS and for any user holding

历史摘要 · 未重新核验 · GitHub Advisory