As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software...

CVE-2026-76530

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int

历史摘要 · 未重新核验 · NVD

Use of Non-Canonical URL paths for authorization decisions vulnerability in Apache APISIX. In some configurations where a permissive route overlaps a protected one, a crafted...

CVE-2026-94269

Use of Non-Canonical URL paths for authorization decisions vulnerability in Apache APISIX. In some configurations whe

历史摘要 · 未重新核验 · NVD

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. An unauthen...

CVE-2026-71178

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Pat

历史摘要 · 未重新核验 · NVD

In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects every /…/mgmt/… REST endpoint decides whether to apply its check by calling req...

CVE-2026-80515

In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects every /…/mgmt/… REST e

历史摘要 · 未重新核验 · NVD

Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7...

CVE-2026-15970

Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypa

历史摘要 · 未重新核验 · GitHub Advisory

Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypass when a service proxy is configured with a custom publi...

CVE-2026-15970

Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypa

历史摘要 · 未重新核验 · NVD

Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources

## Summary Kite versions 0.6.9 through 0.14.0 authorize Kubernetes proxy requests against the pod or service identified

历史摘要 · 未重新核验 · GitHub Advisory

Eclipse Jetty: Path parameter traversal

CVE-2026-8384

### Description (as reported) #### Summary In Jetty 12.1.8, org.eclipse.jetty.util.URIUtil.canonicalPath() may leave d

历史摘要 · 未重新核验 · GitHub Advisory

File Browser: Colliding username normalization gives two users the same home directory

CVE-2026-62685

## Summary FileBrowser confines each user to a *scope*: a home directory that acts as the boundary for everything they

历史摘要 · 未重新核验 · GitHub Advisory

Astro: Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch

CVE-2026-59731

# Astro 6.4.7 Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch ## Summary As

历史摘要 · 未重新核验 · GitHub Advisory

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, File Browser builds ne...

CVE-2026-62685

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a spec

历史摘要 · 未重新核验 · NVD

File Browser: Colliding username normalization gives two users the same home directory

CVE-2026-62685

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a spec

历史摘要 · 未重新核验 · OSV.dev

Astro is a web framework for content-driven websites. Version 6.4.7 performs authorization decisions on a partially decoded pathname after reaching the iterative URL decoder lim...

CVE-2026-59731

Astro is a web framework for content-driven websites. Version 6.4.7 performs authorization decisions on a partially deco

历史摘要 · 未重新核验 · NVD

Astro 6.4.7 Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch

CVE-2026-59731

Astro is a web framework for content-driven websites. Version 6.4.7 performs authorization decisions on a partially deco

历史摘要 · 未重新核验 · OSV.dev

Cargo can be coerced to share credentials between registries

CVE-2026-5222

The Rust Security Response Team was notified that Cargo incorrectly normalized the URLs of third-party registries using

历史摘要 · 未重新核验 · GitHub Advisory