#cwe-693

共收录 445 条相关情报。

漏洞预警2026-06-30 发布INFO

Inappropriate implementation in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromiu...

CVE-2026-13859

Inappropriate implementation in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially p

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-06-30 发布INFO

picklescan before 0.0.29 fails to detect the built-in Python trace.Trace.runctx function when used in pickle file reduce methods, allowing attackers to execute arbitrary code. R...

CVE-2025-71352

picklescan before 0.0.29 fails to detect the built-in Python trace.Trace.runctx function when used in pickle file reduce

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

安全公告2026-06-30 发布INFO

Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`

CVE-2026-48808

### Description This is a residual bypass of CVE-2026-46635 / GHSA-vcc8-phrv-43wj that only affects sandboxing enabled

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-693 #cwe-863 #severity:medium

安全公告2026-06-30 发布INFO

Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters

CVE-2026-48807

### Description This is a residual bypass of CVE-2026-47732 / GHSA-pr2w-4gpj-cpq4 left after the initial fix for unguar

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-693 #cwe-863 #severity:medium

安全公告2026-06-30 发布INFO

Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys

CVE-2026-48806

### Description This is a residual bypass of CVE-2026-47732 / GHSA-pr2w-4gpj-cpq4 left after the initial fix for unguar

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-693 #cwe-863 #severity:medium

安全公告2026-06-30 发布INFO

Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`

CVE-2026-48805

### Description The 3.26.0 source-policy hardening changed the signature of `CoreExtension::checkArrow()` to take a boo

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-693 #severity:low

安全公告2026-06-30 发布INFO

Fission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escape

CVE-2026-50564

### Summary Fission's `Environment` CRD exposes `spec.runtime.podSpec` and `spec.builder.podSpec`, which are merged int

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-269 #cwe-284 #cwe-693 #severity:critical

安全公告2026-06-30 发布INFO

Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover

CVE-2026-50545

### Summary A stronger framing of the same root cause as GHSA-gx55-f84r-v3r7: the `Environment.spec.runtime.podSpec` /

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-269 #cwe-284 #cwe-693 #severity:critical

安全公告2026-06-29 发布INFO

OpenAM Authenticated RCE via Groovy Sandbox Escape

CVE-2026-47424

## Summary **Description** A Protection Mechanism Failure (CWE-693) in OpenAM's server-side scripting sandbox allows a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-693 #severity:high

漏洞预警2026-06-29 发布INFO

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help con...

CVE-2026-13601

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl.

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

安全公告2026-06-28 发布INFO

7-Zip for Windows through 26.02 fails to preserve the Mark-of-the-Web when extracting a crafted...

CVE-2026-58052

7-Zip for Windows through 26.02 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because it

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-693 #severity:medium

漏洞预警2026-06-28 发布LOW

7-Zip for Windows through 26.02 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifi...

CVE-2026-58052

该漏洞影响 7-Zip for Windows 至版本 26.02。当解压精心构造的 RAR5 压缩包时，7-Zip 未能正确保留 Mark-of-the-Web (MotW) 标记。具体机制是：7-Zip 试图阻止压缩包内提供的 Zone

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

安全公告2026-06-26 发布INFO

pnpm: Manifest identity spoof satisfies allowBuilds and runs attacker lifecycle

CVE-2026-55487

## Summary Keep build approval for opaque dependency sources byte-exact for GHSA-5wx6-mg75-v57r / CAND-PNPM-123. Merge

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-346 #cwe-693 #cwe-829 #severity:high

漏洞预警2026-06-26 发布INFO

Mattermost versions 10.11.x <= 10.11.18, 11.6.x <= 11.6.3, 11.5.x <= 11.5.6 fail to properly apply markdown image rendering restrictions to AI bot tool result posts, which allow...

CVE-2026-3472

Mattermost versions 10.11.x <= 10.11.18, 11.6.x <= 11.6.3, 11.5.x <= 11.5.6 fail to properly apply markdown image render

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-06-25 发布INFO

pnpm is a package manager. Prior to 10.34.2 and 11.5.3, the generic peer-suffix normalizer also stripped parenthesized text from git, URL, tarball, file, and other opaque locato...

CVE-2026-55487

pnpm is a package manager. Prior to 10.34.2 and 11.5.3, the generic peer-suffix normalizer also stripped parenthesized t

历史摘要 · 未重新核验 · NVD

#cve #cwe-346 #cwe-693 #cwe-829

漏洞预警2026-06-24 发布INFO

Ghost is a Node.js content management system. From 5.46.1 until 6.21.2, the validation applied to filters on the public API endpoints could be partially bypassed, making it poss...

CVE-2026-53949

Ghost is a Node.js content management system. From 5.46.1 until 6.21.2, the validation applied to filters on the public

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-693

漏洞预警2026-06-24 发布INFO

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command execution permission-check bypass in th...

CVE-2026-48721

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp c

历史摘要 · 未重新核验 · NVD

#cve #cwe-180 #cwe-693

漏洞预警2026-06-24 发布INFO

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run...

CVE-2026-57281

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carr

历史摘要 · 未重新核验 · NVD

#cve #cwe-93 #cwe-693

漏洞预警2026-06-24 发布INFO

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type casts applied to the elements of typed for-each loops in sandboxed Groovy scri...

CVE-2026-57280

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type casts applied to the

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-06-23 发布INFO

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0-ea.1 until 3.7.5, there is a medium severity vulnerability in Traefik's Kubernetes Ingress NGINX provider that cau...

CVE-2026-54762

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0-ea.1 until 3.7.5, there is a medium severity vulnerabilit

历史摘要 · 未重新核验 · NVD

#cve #cwe-636 #cwe-693