A vulnerability was detected in ag-ui-protocol ag-ui up to 2026-09-23. This affects an unknown part of the file SseParser.kt of the component Kotlin Community SDK. Performing a ...

CVE-2026-101099

A vulnerability was detected in ag-ui-protocol ag-ui up to 2026-09-23. This affects an unknown part of the file SseParse

历史摘要 · 未重新核验 · NVD

A vulnerability was found in Trusted Domain Project OpenDMARC up to 1.4.2. This vulnerability affects the function strcasecmp in the library libopendmarc/opendmarc_policy.c. The...

CVE-2026-101017

A vulnerability was found in Trusted Domain Project OpenDMARC up to 1.4.2. This vulnerability affects the function strca

历史摘要 · 未重新核验 · NVD

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarc_policy_parse_dmarc in the library libopendmarc/opendmarc_poli...

CVE-2026-101016

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarc_poli

历史摘要 · 未重新核验 · NVD

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 8.0.6, the FTP parser in src/app-layer-ftp.c treat...

CVE-2026-63450

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

历史摘要 · 未重新核验 · NVD

Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)

CVE-2026-81516

## Summary Steeltoe's Consul discovery client parses the `secure` metadata field on each registered service instance us

历史摘要 · 未重新核验 · GitHub Advisory

Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)

CVE-2026-81515

## Summary Steeltoe's Eureka discovery client deserializes the registry response as a single unit. If any registered in

历史摘要 · 未重新核验 · GitHub Advisory

mport is the MidnightBSD Package Manager. Prior to 2.7.8, libmport/util.c did not make every truncated, corrupt, or failed zstd stream fatal in mport_decompress_zstd(), and libm...

CVE-2026-54580

mport is the MidnightBSD Package Manager. Prior to 2.7.8, libmport/util.c did not make every truncated, corrupt, or fail

历史摘要 · 未重新核验 · NVD

mport is the MidnightBSD Package Manager. Prior to 2.7.8, mport_verify_package() in libmport/verify.c could continue after MD5File() or SHA256_File() failed and compare an expec...

CVE-2026-54578

mport is the MidnightBSD Package Manager. Prior to 2.7.8, mport_verify_package() in libmport/verify.c could continue aft

历史摘要 · 未重新核验 · NVD

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 until 4.3.0, ConsulDiscoveryClient constr...

CVE-2026-81516

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applicati

历史摘要 · 未重新核验 · NVD

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 until 4.3.0, EurekaDiscoveryClient deseri...

CVE-2026-81515

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applicati

历史摘要 · 未重新核验 · NVD

Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Starting in version 0.1.6 and prior to version 0.2.4.4, a fail-open in the authenticatio...

CVE-2026-53459

Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Starting in version 0.1.6 and p

历史摘要 · 未重新核验 · NVD

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTP(S) content. A remote unauthentic...

CVE-2026-89025

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to mi

历史摘要 · 未重新核验 · NVD

SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.9, RTPChannel.OnRTPPacketReceived and the STUNAttribute.ParseMessageAttributes, STUNXORAddressAttrib...

CVE-2026-54632

SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.9, RTPChannel.OnRTPPacketReceived and the S

历史摘要 · 未重新核验 · NVD

baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, ca...

CVE-2026-45819

baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input para

历史摘要 · 未重新核验 · NVD

SIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)

## Summary `TurnServer.ReceiveUdpAsync` places its generic `catch (Exception)` OUTSIDE the `while` receive loop, and `St

历史摘要 · 未重新核验 · GitHub Advisory

SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing

## Summary `SctpSackChunk.ParseChunk` reads the `numGapAckBlocks` and `numDuplicateTSNs` fields (each up to 65535) direc

历史摘要 · 未重新核验 · GitHub Advisory

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection hand...

CVE-2026-52856

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a

历史摘要 · 未重新核验 · NVD

Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service

CVE-2026-52856

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a

历史摘要 · 未重新核验 · OSV.dev

Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service

CVE-2026-52856

### Summary A maliciously crafted packet received & parsed during the SFTP connection handshake will cause a Go panic.

历史摘要 · 未重新核验 · GitHub Advisory

Valibot helps validate data using a schema. Versions prior to 1.4.2 can throw a TypeError inside its flatten() helper when validation issues contain attacker-controlled object k...

CVE-2026-59952

Valibot 是一个用于通过 schema 验证数据的 JavaScript 库。在 1.4.2 版本之前，其 flatten() 助手函数存在一个可被利用的缺陷。当验证过程中产生的 issue（验证错误）包含攻击者可控的对象键（如 to

历史摘要 · 未重新核验 · NVD