IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. Wh...

CVE-2026-48961

IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine

历史摘要 · 未重新核验 · NVD

multiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsing

CVE-2026-8162

### Impact multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught exception. By sending a

历史摘要 · 未重新核验 · GitHub Advisory

Granian is a Rust HTTP server for Python applications. From 0.2.0 to 2.7.4, Granian aborts a worker process if a WSGI application returns an invalid HTTP response header name or...

CVE-2026-42545

Granian is a Rust HTTP server for Python applications. From 0.2.0 to 2.7.4, Granian aborts a worker process if a WSGI ap

历史摘要 · 未重新核验 · NVD

free5GC NRF: type-confusion panic in POST /oauth2/token structured-form parser via Reflect.Set on incompatible types

CVE-2026-44325

### Summary free5GC's NRF root SBI endpoint `POST /oauth2/token` contains a parser-level type-confusion bug family. The

历史摘要 · 未重新核验 · GitHub Advisory

free5GC's NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-controlled notifyUri)

CVE-2026-44319

### Summary free5GC's NEF terminates the entire process when a stored PFD-subscription `notifyUri` cannot be reached. In

历史摘要 · 未重新核验 · GitHub Advisory

ech0's acess tokens with expiry=never cannot be revoked: logout panics, delete does not blacklist JTI

## Summary Access tokens created with the "never expire" option have no `exp` JWT claim. Three independent revocation m

历史摘要 · 未重新核验 · GitHub Advisory