共收录 93 条相关情报。
← 返回所有主题CVE-2026-56077
CVE-2026-56077 是 PraisonAI 产品（版本低于 1.5.115）中 MultiAgentLedger 组件的一个信息泄露漏洞。该漏洞源于代理 ID 的唯一性未强制实施，攻击者可注册具有重复 ID 的代理，从而共享账本实
CVE-2026-50202
Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applicati
CVE-2026-53826
OpenClaw before 2026.4.26 contains an information disclosure vulnerability in sandboxed session spawning that exposes th
CVE-2026-53826
OpenClaw before 2026.4.26 contains an information disclosure vulnerability in sandboxed session spawning that exposes th
CVE-2026-54096
### Summary This is similar vulnrability of **`CVE-2026-0035`**, which was fixed in Android `MediaProvider` with **high*
CVE-2026-47141
vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM exposes some process-wide observability bu
CVE-2026-48096
### Description In OpenFGA, when iterator caching is enabled, two distinct check requests can produce the same cache key
CVE-2026-42535
A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate t
CVE-2025-15653
Dräger Zeus Infinity Empowered (Zeus IE) and Zeus RS C500 anesthesia workstations contain a local security vulnerability
CVE-2025-15653
Dräger Zeus Infinity Empowered (Zeus IE) and Zeus RS C500 anesthesia workstations contain a local security vulnerability
CVE-2026-45077
### Description `Symfony\Bridge\Monolog\Command\ServerLogCommand` (the `server:log` console command) is a development-t
CVE-2026-46430
Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, the SSE event server bound to 0.0.0.0:5553 on Li
CVE-2026-46430
### Summary The SSE event server bound to `0.0.0.0:5553` on Linux/macOS by default because the platform-dependent host
CVE-2026-8958
Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Fi
CVE-2026-46723
The additional_tables configuration of the page and tt_content indexers accepts arbitrary table and field names. A backe
CVE-2026-44552
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the t
CVE-2026-45411
### Summary VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape fro
CVE-2026-45411
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.3, it is possible to catch a host exception using the yield*
CVE-2026-44009
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, This vulnerability is fixed in 3.11.2.
CVE-2026-44008
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, the new method neutralizeArraySpeciesBatch works with obj