Apache NiFi 0.0.1 through 2.9.0 support building qualified URLs from one of several HTTP request headers that provide an alternative to the standard Host header without validati...

CVE-2026-54665

Apache NiFi 0.0.1 through 2.9.0 support building qualified URLs from one of several HTTP request headers that provide an

历史摘要 · 未重新核验 · NVD

Anki's local HTTP server does not sufficiently validate requests

## Summary Anki launches a local HTTP server to serve media files and web pages for parts of its interface. The server

历史摘要 · 未重新核验 · GitHub Advisory

LangSmith SDK TracingMiddleware: Arbitrary server-side file read

# Summary An attacker who can send an HTTP request to a server running the LangSmith SDK's `TracingMiddleware` can caus

历史摘要 · 未重新核验 · GitHub Advisory

Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests

## Impact Uni-CLI versions before 0.225.2 exposed the legacy JSON-RPC-over-HTTP MCP transport on loopback without valid

历史摘要 · 未重新核验 · GitHub Advisory

dbt MCP Server: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens

CVE-2026-55837

## Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens ### Summary The local OAuth helper FastAPI server

历史摘要 · 未重新核验 · GitHub Advisory

TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover

CVE-2026-55660

TinaCMS registers window message listeners — the useTina overlay handler, the OAuth authentication popup handler, and th

历史摘要 · 未重新核验 · GitHub Advisory

Craft CMS: Blind SSRF and Arbitrary JavaScript Injection via Host Header Poisoning in actionResourceJs

CVE-2026-55791

**1. Overview** Craft CMS is vulnerable to Server-Side Request Forgery (SSRF) and Arbitrary JavaScript Injection throug

历史摘要 · 未重新核验 · GitHub Advisory

Blocky DNSSEC validation bypass and validation-cache scope pollution

## Summary Blocky accepts and caches forged DNS answers while `dnssec.validate: true` is enabled. The issue has two rel

历史摘要 · 未重新核验 · GitHub Advisory

webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

CVE-2026-9595

### Impact When a user-configured proxy on `webpack-dev-server` has a broad context (e.g. `/`) and `ws: true`, it also

历史摘要 · 未重新核验 · GitHub Advisory

Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

CVE-2026-12304

Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR

历史摘要 · 未重新核验 · NVD

Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted...

CVE-2026-47825

Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies in certain configu

历史摘要 · 未重新核验 · GitHub Advisory

Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies in certain configuration scenarios. This affects both the WebMVC and WebFlu...

CVE-2026-47825

Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies in certain configu

历史摘要 · 未重新核验 · NVD

Impact: When a user-configured proxy on webpack-dev-server has a broad context (e.g. /) and ws: true, it also intercepts the dev server's own HMR WebSocket and forwards it to th...

CVE-2026-9595

Impact: When a user-configured proxy on webpack-dev-server has a broad context (e.g. /) and ws: true, it also intercepts

历史摘要 · 未重新核验 · NVD

Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1...

CVE-2026-45173

Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1 exhibit an origin validatio

历史摘要 · 未重新核验 · GitHub Advisory

Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115...

CVE-2026-12032

Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker

历史摘要 · 未重新核验 · GitHub Advisory

Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1 exhibit an origin validation flaw within its internal web-page verification routines...

CVE-2026-45173

Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1 exhibit an origin validatio

历史摘要 · 未重新核验 · NVD

Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to bypass site i...

CVE-2026-12032

Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker

历史摘要 · 未重新核验 · NVD

Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium se...

CVE-2026-12024

Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker to bypass

历史摘要 · 未重新核验 · NVD

@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects

CVE-2026-48022

### Impact Wreck strips credential headers (Authorization, Cookie, Proxy-Authorization) before following a cross-origin

历史摘要 · 未重新核验 · GitHub Advisory

Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an authenticated user into visi...

CVE-2026-41700

Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacki

历史摘要 · 未重新核验 · NVD