共收录 1360 条相关情报。
← 返回所有主题CVE-2026-93679
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to cause a denial of service due to un
CVE-2026-104633
When migrating a repository from another Gitea instance, Gitea used the page size reported in the source server's API se
CVE-2026-96580
Gitea expanded a workflow's static `strategy.matrix` into its full Cartesian product without a size limit when creating
CVE-2026-102404
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP
CVE-2026-105854
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary ve
CVE-2026-105854
## Impact A malformed multipart request body could take an extremely long time to finish. ## Patches Users should upgra
CVE-2026-105760
## Summary The OpenAI-compatible chat endpoint accepts request-level video loader options through `media_io_kwargs`. A
CVE-2026-105760
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the request-level m
CVE-2026-105759
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's track_http_metri
CVE-2026-105749
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos
CVE-2026-55266
In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lea
CVE-2026-101161
The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review
CVE-2026-101160
The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review rating is numeric before
CVE-2026-101161
The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review
CVE-2026-101160
The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review rating is numeric before
CVE-2026-104861
## Overview `probe-image-size` scans the SVG header with a searching regular expression, `/]*>/`. On input that contain
CVE-2026-104861
probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parse_sync/svg.js and li
CVE-2026-104861
probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parse_sync/svg.js and li
CVE-2026-104844
PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it. Prior to 7.1.6, s
CVE-2026-104844
PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it. Prior to 7.1.6, s