共收录 103 条相关情报。
← 返回所有主题CVE-2026-119578
MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows a
CVE-2026-108099
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Entity List
CVE-2026-108097
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Drupal core a
CVE-2026-119050
Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary
CVE-2026-116692
## Summary MLflow 3.12.0 introduced registration and deserialization support for third-party scorers in OSS MLflow. Dur
CVE-2026-116692
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.
CVE-2026-115886
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.
CVE-2026-115886
### Summary MLflow's tracking server exposes `POST /ajax-api/3.0/mlflow/scorer/invoke` with **no authentication**, and t
CVE-2026-114508
A vulnerability in how relationship inclusion is processed on certain read endpoints. Under specific conditions, a reque
CVE-2026-114660
Grav from 2.0.0 before 2.2.5 contains an improper access control vulnerability in FlexDirectory::dynamicFlexField() that
CVE-2026-114508
Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read
CVE-2026-114508
Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read
CVE-2026-92206
CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability. This vulnerability allows r
CVE-2026-55543
TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soundbank.path
CVE-2026-104629
A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an in
CVE-2026-106440
Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-o
CVE-2026-106439
Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.7 and 1.4.0.dev10, Hydra store
CVE-2026-105782
Scrapy is a high-level web crawling and scraping framework for Python. From 1.4.0 until 2.14.2, RefererMiddleware in scr
CVE-2026-105064
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Unlimited Elements U
CVE-2017-20285
YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/h