#cwe-488

共收录 35 条相关情报。

漏洞预警2026-09-04 发布INFO

IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of ...

CVE-2026-18489

IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sens

历史摘要 · 未重新核验 · NVD

#cve #cwe-488

漏洞预警2026-08-30 发布INFO

Exposure of Data Element to Wrong Session vulnerability in ash-project ash_graphql can deliver one subscription's resolved records to a different subscriber's topic. AshGraphql...

CVE-2026-82367

Exposure of Data Element to Wrong Session vulnerability in ash-project ash_graphql can deliver one subscription's resolv

历史摘要 · 未重新核验 · NVD

#cve #cwe-488

安全公告2026-08-30 发布INFO

Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic

CVE-2026-82367

Exposure of Data Element to Wrong Session vulnerability in ash-project ash_graphql can deliver one subscription's resolv

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-488

漏洞预警2026-08-07 发布INFO

Hono is a Web application framework that provides support for any JavaScript runtime. From 3.8.0 to 4.12.33, memo() from hono/jsx retains the result of a server side render and ...

CVE-2026-71850

Hono is a Web application framework that provides support for any JavaScript runtime. From 3.8.0 to 4.12.33, memo() from

历史摘要 · 未重新核验 · NVD

#cve #cwe-488

安全公告2026-08-07 发布INFO

Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure

CVE-2026-71850

### Summary `memo()` from `hono/jsx` retains the result of a server-side render and reuses it for later renders with co

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-488 #severity:medium

漏洞预警2026-07-29 发布INFO

In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may allow one client's Consul authentication token to be used fo...

CVE-2026-16326

In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may all

历史摘要 · 未重新核验 · NVD

#cve #cwe-488

安全公告2026-07-28 发布INFO

The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse...

CVE-2026-16498

The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-H

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-488 #severity:critical

漏洞预警2026-07-28 发布INFO

The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may allow one user's Te...

CVE-2026-16498

The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-H

历史摘要 · 未重新核验 · NVD

#cve #cwe-488

安全公告2026-07-28 发布INFO

terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode

CVE-2026-16498

The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-H

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-488

漏洞预警2026-07-17 发布MEDIUM

view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 4.0.0 until 4.12.0, ViewComponent::Base instances retain r...

CVE-2026-54497

view_component 是一个用于在 Ruby on Rails 中构建可复用、可测试和封装视图组件的框架。从 4.0.0 到 4.12.0 版本，ViewComponent::Base 实例在多次调用 render_in 时保留了渲

历史摘要 · 未重新核验 · NVD

#cve #cwe-362 #cwe-488 #cwe-668

安全公告2026-07-15 发布INFO

ViewComponent: Reused Component Instances Retain Stale Render Context

CVE-2026-54497

# Reused Component Instances Retain Stale Render Context ## Summary `ViewComponent::Base` instances retain multiple re

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #rubygems #cwe-362 #cwe-488 #cwe-668 #severity:medium

安全公告2026-07-04 发布INFO

A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function...

CVE-2026-14621

A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function QueuePushReqStreamObserver.ini

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-488 #severity:low

漏洞预警2026-07-04 发布INFO

A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function QueuePushReqStreamObserver.initEggroll of the file java/osx/osx-broker/src/main/java/or...

CVE-2026-14621

A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function QueuePushReqStreamObserver.ini

历史摘要 · 未重新核验 · NVD

#cve #cwe-488

漏洞预警2026-05-29 发布MEDIUM

A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-concurrency traffic conditions, intermittently allow reque...

CVE-2026-9831

CVE-2026-9831 是 Extreme Networks 旗下共享平台 Extreme Platform ONE 中 IAM 网关 API 密钥认证路径存在的一个竞态条件漏洞。在高并发流量条件下，该竞态条件可能间歇性地导致使用 /I

历史摘要 · 未重新核验 · NVD

#cve #cwe-362 #cwe-488

漏洞预警2026-05-27 发布INFO

Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO creates one shared UFOWebSocketHandler instance ...

CVE-2026-46416

Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-488