共收录 336 条相关情报。
← 返回所有主题CVE-2026-108266
Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. P
CVE-2026-108265
Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0,
CVE-2026-108261
Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the /~/* admin preview ro
CVE-2026-107804
## Summary In Nginx UI versions 2.2.0 through 2.5.x, the official bundled reverse-proxy topology did not preserve the e
CVE-2026-108261
### Summary The TinaCMS admin builds its preview `` from the `/~/*` hash-router splat without checking that the value s
CVE-2026-107804
Nginx UI is a web user interface for the Nginx web server. From 2.2.0 until 2.6.0, the bundled reverse proxy does not pr
CVE-2026-107804
Nginx UI is a web user interface for the Nginx web server. From 2.2.0 until 2.6.0, the bundled reverse proxy does not pr
CVE-2026-94486
The Next.js development server (`next dev`) exposes a Model Context Protocol endpoint that does not verify which website
CVE-2026-94485
In Next.js App Router applications built with webpack, metadata image routes such as opengraph-image and twitter-image i
CVE-2026-105861
Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authent
CVE-2026-105783
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.1
CVE-2026-105396
Heym before v0.0.112 contains a token leakage vulnerability in build_public_base_url() that allows unauthenticated attac
CVE-2026-105396
Heym before v0.0.112 contains a token leakage vulnerability in build_public_base_url() that allows unauthenticated attac
CVE-2026-74802
**High** ## Package gomod `github.com/siyuan-note/siyuan/kernel` ## Affected versions 3.7.3 ## Patched versions *(non
CVE-2026-94486
Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev developmen
CVE-2026-94485
Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the `next dev` developm
CVE-2026-103922
Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.
CVE-2026-103922
Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.
CVE-2026-102878
mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers
CVE-2026-102675
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6