#cwe-913
共收录 35 条相关情报。
← 返回所有主题 漏洞预警2026-10-30 发布HIGH
CVE-2026-62848
Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023.0.101-rc until 2025.1.18, 202
来源摘录 · NVD
漏洞预警2026-10-28 发布MEDIUM
CVE-2026-118538
A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTr
来源摘录 · NVD
漏洞预警2026-10-13 发布INFO
CVE-2026-102734
asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the
历史摘要 · 未重新核验 · NVD
安全公告2026-10-13 发布INFO
CVE-2026-102734
asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-10-13 发布INFO
CVE-2026-108948
A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of t
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-13 发布INFO
CVE-2026-108948
A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of t
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-108819
A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of
历史摘要 · 未重新核验 · NVD
安全公告2026-10-05 发布INFO
CVE-2026-105180
A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/up
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-05 发布INFO
CVE-2026-105180
A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/up
历史摘要 · 未重新核验 · NVD
安全公告2026-10-01 发布INFO
CVE-2026-92935
## Summary
The `NodeVM` constructor computes `hasRealRequireConfig` using `typeof requireOpts === 'object' && requireOp
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-01 发布INFO
CVE-2026-92944
## Reporter
- Name or handle: `[YMsora]`
- Report date: 2026-08-14
## Summary
The latest published vm2 release, **3.1
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-17 发布INFO
CVE-2026-92955
vm2 before 3.11.8 contains a sandbox escape vulnerability in NodeVM that allows attackers to access the host __proto__ g
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-17 发布INFO
CVE-2026-92953
vm2 versions from 3.11.0 before 3.11.8 fail to protect host TypedArray and ArrayBuffer prototypes from sandbox mutation.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-17 发布INFO
CVE-2026-92946
vm2 before 3.11.7 contains a remote code execution vulnerability when require.external is enabled without an explicit re
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-17 发布INFO
CVE-2026-92935
vm2 is a sandbox for running untrusted Node.js code. In versions >= 3.11.4 and <= 3.11.6, the NodeVM constructor compute
历史摘要 · 未重新核验 · NVD
安全公告2026-09-16 发布INFO
CVE-2026-92217
A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-16 发布INFO
CVE-2026-92217
A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-12354
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-04 发布INFO
CVE-2026-85408
A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-
历史摘要 · 未重新核验 · NVD
安全公告2026-09-02 发布INFO
CVE-2026-84430
A security vulnerability has been detected in gouguoa up to 5.10.0/6.0.1. This vulnerability affects the function update
历史摘要 · 未重新核验 · GitHub Advisory