A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file renderers/web_core/src/v0_9/processing/message-processor.ts of the component Message Parsing. This manipulation causes dynamically-determined object attributes. The attack can be initiated remotely. The project was informed of the problem early through an issue report but has not

CVE-2026-92217 是 a2ui-project 开源项目 a2ui（0.10.6 及更早版本）中的一个安全缺陷，位于渲染核心的消息处理组件。问题点在该项目 renderers/web_core/src/v0_9/processing/message-processor.ts 文件中的 processMessages 函数，它承担 v0.9 消息协议的解析、路由与分发职责。由于在处理过程中对消息传入的键名（属性名）缺乏充分校验与白名单约束，外部可控输入能够影响对象属性的动态赋值流程，形成“动态决定的对象属性”（CWE-915 类）问题。典型后果包括属性被写入非预期位置、原型链被污染，以及同一 JavaScript 运行时内其他组件或模块的对象状态、配置与数据被意外改写，从而破坏应用逻辑与数据完整性。该缺陷可经网络远程触发，利用者仅需较低权限（PR:L），且不需要用户交互（UI:N），攻击复杂度低（AC:L）；成功利用后对机密性、完整性与可用性均为有限（Low）影响，NVD 基础评分 6.3，属中危。项目方通过 issue 报告提前获知该问题，但截至目前尚未公开回应，也没有修复版本或缓解措施公告。当前元数据中没有 EPSS 评分，未列入 CISA KEV，也没有在野利用的标注。鉴于 a2ui 常作为 Web 前端/AI 界面渲染组件被集成到管理后台或对外服务中，相关部署实例应视为具备实际暴露面，需要评估其消息输入是否可被非可信来源触达。

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code on the application server due to improper validation of JNDI names in the Resource Adapter Installation Verification Test application.

A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. This manipulation of the argument createdBy causes dynamically-determined object attributes. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Th

A security vulnerability has been detected in gouguoa up to 5.10.0/6.0.1. This vulnerability affects the function update of the file app/home/controller/Index.php of the component edit_personal Endpoint. Such manipulation of the argument position_id leads to dynamically-determined object attributes. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgra

A security vulnerability has been detected in gouguoa up to 5.10.0/6.0.1. This vulnerability affects the function update of the file app/home/controller/Index.php of the component edit_personal Endpoint. Such manipulation of the argument position_id leads to dynamically-determined object attributes. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgra

Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.25.RELEASE and earlier

CVE-2026-48105 影响 Arc Enterprise（Arc 是一个开源的、SQL 原生时序数据库，用于遥测数据）。在版本 26.06.1 之前，Arc Enterprise 的 Raft 状态机（FSM）在 `internal/cluster/raft/fsm.go` 的 `applyRegisterFile` 函数中处理 manifest 注册提案时，对攻击者选择的文件路径缺乏充分验证。具体而言，唯一的检查是路径非空，但没有限制父目录遍历（如 `..`）、没有合法前缀白名单、没有协议（scheme）限制（如 `s3://` 与本地路径）、也没有长度限制。这意味着在集群模式下，一个能够向 Raft 提交提案的恶意节点或攻击者可以指定任意文件路径，可能导致写入或操作非预期位置的文件，破坏存储后端数据完整性或造成非预期影响。该漏洞在 2026.06.1 版本中已修复。官方提供了若干缓解措施：通过严格防火墙规则限制集群网络仅允许可信对等节点访问；审计集群 manifest，检查是否存在与配置存储后端根目录不匹配的路径（任何异常路径都应视为可疑）；在修复可用前禁用集群模式。此漏洞属于设计层面的安全缺陷，但尚未有公开的利用证据或 KEV 收录信息。由于缺少 CVSS 评分，严重性暂定为低，但实际风险取决于集群网络暴露程度和攻击者能否提交 Raft 提案。建议用户尽快升级到修复版本，并落实网络隔离与审计等缓解措施。

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

A flaw was found in the search-v2-operator. This vulnerability allows a privileged user, specifically a Custom Resource (CR) editor, to manipulate Search CR fields such as imageOverride, arguments, and environment variables without proper validation. By exploiting this, an attacker can mount arbitrary secrets into a search container's environment or replace the container image with an attacker-con

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.js fail to block stacked indirection through Function.prototype.call around dangerous host prototype getter and setter mutators, allowing sandbox code to sever a host intrinsic's prototype chain and reach e.constructor.constructor for arbitrary host command execution. This issue is fixed in version 3

### Summary VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. ### Details The fix for https://github.com/patriksimek/vm2/security/advisories/GHSA-v6mx-mf47-r5wg is insufficient and can be bypassed by replacing `indirectcall.call(dangerousmutator, ...)` with `indirectcall

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade-func in src/app/server/dispatch-center.js and handleFs in src/app/server/fs.js, exposing Upgrade and fsExport methods that can execute commands, open fi

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In versions 4.1.0 and prior, the JsonPlusSerializer can reconstruct Python objects from JSON checkpoint payloads. Under conditions where someone could modify checkpoint bytes at rest in the backing store, the deserialization path could reconstruct objects beyond w

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, a sandbox escape vulnerability in vm2 allows arbitrary code execution in the host process when untrusted code is executed with async support on runtimes exposing WebAssembly JSPI (WebAssembly.promising / WebAssembly.Suspending). In the tested configuration, a JSPI-backed Promise can reach Promise.prototype.finally() in a way th

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. This issue has been patched in version 3.11.4.

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx (CVE-2023-37903) introduced a check in nodevm.js line 263 that blocks the combination nesting: true + require: false. However, the check uses strict equality (options.require === false), which is trivially bypassed by omitting the require option entirely. When require is not specified, options.re

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, by combining Buffer.call.call({}.__lookupGetter__, Buffer, "__proto__"), Buffer.call.call({}.__lookupSetter__, Buffer, "__proto__"), and Node.js's ERR_INVALID_ARG_TYPE Error, the host's TypeError constructor can be obtained, which allows the escape from the sandbox. This allows attackers to run arbitrary code. This issue has be

PraisonAI is a multi-agent teams system. Prior to version 4.6.34, PraisonAI's MCP (Model Context Protocol) server (praisonai mcp serve) registers four file-handling tools by default — praisonai.rules.create, praisonai.rules.show, praisonai.rules.delete, and praisonai.workflow.show. Each accepts a path or filename string from MCP tools/call arguments and joins it onto ~/.praison/rules/ (or, for wor

Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile allows the variation setting (sendfile type) to be set by the client via the X-Sendfile-Type header, if it is not considered in the middleware constructor or the Plack environment. A malicious client can set the X-Sendfile-Type header to "X-Accel-Redirect" to ser