共收录 630 条相关情报。
← 返回所有主题CVE-2026-56311
Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.get_current_plan_max_org RPC function
CVE-2026-46700
## Summary In `@actual-app/sync-server`, the `GET /secret/:name` endpoint (`app-secrets.js:53`) checks only that the ca
CVE-2026-12797
A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function async_pre_call_hook of the
CVE-2026-12799
A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this issue is the function ui_vi
CVE-2026-12797
A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function async_pre_call_hook of the
CVE-2026-12771
CVE-2026-12771 影响 BerriAI litellm 版本 1.82.2 及更早版本。漏洞位于组件 M2M JWT Handler 的 litellm/proxy/auth/user_api_key_auth.py 文件中，由
CVE-2026-12770
A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file
CVE-2026-56295
Capgo before 12.128.2 contains an authorization bypass vulnerability in webhook management endpoints that allows non-exp
CVE-2026-56295
Capgo before 12.128.2 contains an authorization bypass vulnerability in webhook management endpoints that allows non-exp
CVE-2026-12673
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalati
CVE-2026-12673
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalati
CVE-2026-55775
### Summary A user that is granted namespace management (`/sys/namespaces`) capabilities within a non-root namespace ("
CVE-2026-48089
DevGuard provides vulnerability management for the full software supply chain. Prior to 1.4.2, on a DevGuard API instanc
CVE-2026-49338
gonic is a music streaming server / free-software subsonic server API implementation. Prior to version 0.21.0, the Subso
CVE-2026-53851
### Summary Slack reaction events could ignore reaction notification settings. In affected versions, a Slack reaction e
CVE-2026-54683
## Summary A previous advisory (CVE-2026-49463 / GHSA-qpm9-h556-mwxm) reported that any logged-in user could download a
CVE-2026-50201
Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applicati
CVE-2026-20190
A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information o
CVE-2026-54012
## Summary Open WebUI lets a user who can create, update, or import workspace models store arbitrary `meta.knowledge` e
CVE-2026-12213
A vulnerability was found in hcengineering Huly Platform up to 0.7.0. Affected by this vulnerability is the function get