共收录 1180 条相关情报。
← 返回所有主题CVE-2026-109310
SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig template function map in the /api/icon/getDynamicIcon content p
CVE-2026-96618
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex allows an untrusted package
CVE-2026-109351
Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory allocation vulnerability that allows remote attackers to
CVE-2026-109310
SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig template function map in the /api/icon/getDynamicIcon content p
CVE-2026-109228
SGLang through 0.5.21 contains a resource budget bypass vulnerability that allows remote attackers to override GLM-V vid
CVE-2026-109227
SGLang through 0.5.21 contains an unbounded memory allocation vulnerability in preprocess_video in qwen_vl.py that decod
CVE-2026-109225
SGLang through 0.5.21 contains an unbounded memory allocation vulnerability that allows unauthenticated remote attackers
CVE-2026-109205
LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that
CVE-2026-108768
A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of th
CVE-2026-108859
mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote una
CVE-2026-108859
mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote una
CVE-2026-108755
Hatchet through 0.110.5 contains an allocation of resources without limits vulnerability that allows unauthenticated att
CVE-2026-108714
MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exh
CVE-2026-108755
Hatchet through 0.110.5 contains an allocation of resources without limits vulnerability that allows unauthenticated att
CVE-2026-108714
MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exh
CVE-2026-107843
`ModuleRegistration::compile()` reaches its follow-up registration branch on **any** POST to a page carrying the module.
CVE-2026-91970
# Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API ## Summary The al
CVE-2026-91979
### Summary Vikunja lets you export your data as a zip and import it back. The import doesn't limit how large the archiv
CVE-2026-107843
Contao is an Open Source CMS. From version 4.1.0 until 5.3.50 and 5.7.12, ModuleRegistration::compile() enters its follo
CVE-2026-102554
Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versio