共收录 2098 条相关情报。
← 返回所有主题CVE-2026-78335
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 1
CVE-2026-6567
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 1
CVE-2026-5954
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 1
CVE-2026-16301
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 1
CVE-2026-16275
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 1
CVE-2026-14552
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 1
CVE-2026-103549
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 1
CVE-2026-89124
Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within
CVE-2026-109561
goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user app
CVE-2026-109560
Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run u
CVE-2026-109559
EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that lets attackers load arbitrary origin
CVE-2026-109376
ERPNext 15.55.0 through 16.50.0 contains an incorrect authorization vulnerability in the get_timesheet_html method that
CVE-2026-104355
A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that pee
CVE-2026-77366
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, tool dispatch
CVE-2026-77366
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, tool dispatch
CVE-2026-109374
ZITADEL 3.0.0 before 4.19.2 contains a privilege escalation vulnerability in OIDC token exchange that allows end-user im
CVE-2026-109336
SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to read fields hidden by
CVE-2026-109302
Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 applies its GraphQL introspection control only to oper
CVE-2026-109285
Open WebUI from 0.6.0 before 0.11.4 contains an improper access control vulnerability in has_access_to_file that lets fo
CVE-2026-109283
Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass in the OAuth token exchange endpoint, which reads