共收录 216 条相关情报。
← 返回所有主题CVE-2026-64652
GitHub CLI (gh) is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characte
CVE-2026-64652
GitHub CLI (gh) is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characte
CVE-2026-66696
Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks <= 3.7.8 versions.
CVE-2026-66685
Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions.
CVE-2026-66684
Unauthenticated Sensitive Data Exposure in Export Import Menus <= 1.9.2 versions.
CVE-2026-66683
Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript <= 2.0.16 versions.
CVE-2026-65543
Subscriber Sensitive Data Exposure in Vimeo <= 1.2.2 versions.
CVE-2026-66901
Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via unvalidated
CVE-2026-20484
In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local informati
CVE-2026-20484
In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local informati
CVE-2026-67354
guzzlehttp/guzzle versions before 7.15.1 contain an information disclosure vulnerability in RedirectMiddleware. When the
CVE-2026-67355
guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain
CVE-2026-67355
该漏洞影响 guzzlehttp/guzzle 库 7.15.1 之前的所有版本。Guzzle 是一个流行的 PHP HTTP 客户端，广泛用于服务器端应用发起外部请求。问题出在 Cookie 处理逻辑上：当 Guzzle 接收到响应中的
CVE-2026-67354
CVE-2026-67354 是 PHP HTTP 客户端库 guzzlehttp/guzzle 在 7.15.1 之前版本中存在的一处信息泄露漏洞，位于 RedirectMiddleware 组件中。当用户启用可选配置 allow_red
CVE-2026-67354
guzzlehttp/guzzle versions before 7.15.1 contain an information disclosure vulnerability in RedirectMiddleware. When the
CVE-2026-67355
guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain
CVE-2026-28144
Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedded Sensiti
CVE-2026-6267
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and
CVE-2026-67425
Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, llm.chat reads provider keys
CVE-2026-54660
swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resol