#cwe-913

共收录 35 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布HIGH

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023.0.101-rc until 2025.1.18, 2026.0.25 and 2026.1.19, the Windows Visual Studio integrati...

CVE-2026-62848

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023.0.101-rc until 2025.1.18, 202

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTree of the file src/0.8/ui/root.js of the component Render...

CVE-2026-118538

A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTr

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes t...

CVE-2026-102734

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

CVE-2026-102734

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-13 发布INFO

A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability...

CVE-2026-108948

A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of t

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布INFO

A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btn_f...

CVE-2026-108948

A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a man...

CVE-2026-108819

A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of

历史摘要 · 未重新核验 · NVD

安全公告2026-10-05 发布INFO

A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function...

CVE-2026-105180

A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/up

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-05 发布INFO

A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/update/info of the component UserService. Executing a manip...

CVE-2026-105180

A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/up

历史摘要 · 未重新核验 · NVD

安全公告2026-10-01 发布INFO

vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE

CVE-2026-92935

## Summary The `NodeVM` constructor computes `hasRealRequireConfig` using `typeof requireOpts === 'object' && requireOp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-01 发布INFO

vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector

CVE-2026-92944

## Reporter - Name or handle: `[YMsora]` - Report date: 2026-08-14 ## Summary The latest published vm2 release, **3.1

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-17 发布INFO

vm2 before 3.11.8 contains a sandbox escape vulnerability in NodeVM that allows attackers to access the host __proto__ getter/setter through console._stdout and console._stderr....

CVE-2026-92955

vm2 before 3.11.8 contains a sandbox escape vulnerability in NodeVM that allows attackers to access the host __proto__ g

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

vm2 versions from 3.11.0 before 3.11.8 fail to protect host TypedArray and ArrayBuffer prototypes from sandbox mutation. Attackers can use prototype-walking primitives to reach ...

CVE-2026-92953

vm2 versions from 3.11.0 before 3.11.8 fail to protect host TypedArray and ArrayBuffer prototypes from sandbox mutation.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

vm2 before 3.11.7 contains a remote code execution vulnerability when require.external is enabled without an explicit require.root that excludes node_modules. Sandboxed code can...

CVE-2026-92946

vm2 before 3.11.7 contains a remote code execution vulnerability when require.external is enabled without an explicit re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

vm2 is a sandbox for running untrusted Node.js code. In versions >= 3.11.4 and <= 3.11.6, the NodeVM constructor computes `hasRealRequireConfig` with `typeof requireOpts === 'ob...

CVE-2026-92935

vm2 is a sandbox for running untrusted Node.js code. In versions >= 3.11.4 and <= 3.11.6, the NodeVM constructor compute

历史摘要 · 未重新核验 · NVD

安全公告2026-09-16 发布INFO

A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function...

CVE-2026-92217

A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-16 发布INFO

A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file renderers/web_core/src/v0_9/processing/message-processor....

CVE-2026-92217

A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5....

CVE-2026-12354

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-data/api/v3/conversations/<ID>/events of the component Co...

CVE-2026-85408

A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

A security vulnerability has been detected in gouguoa up to 5.10.0/6.0.1. This vulnerability...

CVE-2026-84430

A security vulnerability has been detected in gouguoa up to 5.10.0/6.0.1. This vulnerability affects the function update

历史摘要 · 未重新核验 · GitHub Advisory