共收录 416 条相关情报。
← 返回所有主题CVE-2026-54496
### Summary A soundness vulnerability in the variable-base scalar multiplication gadget of `halo2_gadgets` allowed a ma
CVE-2026-54764
Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's ForwardAuth middle
CVE-2026-54763
Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's BasicAuth, DigestA
CVE-2026-55430
### Summary The workspace app proxy resolves the target app from `httpapi.RequestHost()` which prefers the `X-Forwarded
CVE-2026-49284
## Summary SimpleSAMLphp's SAML SP ACS path does not enforce the IdP selected for an SP-initiated login. If a saved SP
CVE-2026-44937
### Impact A vulnerability has been identified in Fleet when the webhook endpoint is configured without a secret; an att
CVE-2026-58593
NodeBB does not bind the claimed author of an inbound ActivityPub object to the authenticated remote actor. The inbound
CVE-2026-50195
containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a vulnerability in the
CVE-2026-13513
A security flaw has been discovered in MyScale MyScaleDB up to 1.8.0. This vulnerability affects the function SegmentId:
CVE-2026-13507
A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function str_to_uint64 of the file
CVE-2026-13513
A security flaw has been discovered in MyScale MyScaleDB up to 1.8.0. This vulnerability affects the function SegmentId:
CVE-2026-13507
A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function str_to_uint64 of the file
CVE-2026-13483
A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encrypt_credentials of the fil
CVE-2026-13483
A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encrypt_credentials of the fil
CVE-2026-9242
The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vu
CVE-2026-9242
该漏洞存在于WordPress插件RegistrationMagic（自定义注册表单、用户注册、支付和用户登录）的所有版本直到6.0.8.6。插件将PayPal IPN回调处理器注册为一个无需认证（nopriv）的AJAX动作，没有任何身份
CVE-2026-55698
## Maintainer Action Plan This report is ready to review with the shared patch branch. Start with the PR and the expec
CVE-2026-50573
While it is unclear whether this should be classified as a vulnerability, it is being reported through this channel beca
CVE-2026-55698
pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm can persist package-manager bootstrap metadata in the first
CVE-2026-50573
pnpm is a package manager. Prior to 10.34.0 and 11.4.0, `pnpm install` in non-frozen mode can accept new remote package