共收录 2015 条相关情报。
← 返回所有主题CVE-2026-52776
Compliance-trestle (Trestle) is a tooling platform for managing compliance as code. In versions before 3.12.4 and versio
CVE-2026-52776
Compliance-trestle (Trestle) is a tooling platform for managing compliance as code. In versions before 3.12.4 and versio
CVE-2026-45019
Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0,
CVE-2026-45019
### Am I affected? Only if your deployment sets `features.mcp.enabled = true` in `.chainlit/config.toml`. **MCP has bee
CVE-2026-79788
In Dradis Community Edition, the ProvidersController and AgentsController gate their admin_required before_action on `de
CVE-2026-76193
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbi
CVE-2026-70548
Under specific circumstances, low-level user can run request to remote CocoaPods repos via JFrog Artifactory External De
CVE-2026-79717
A server-side request forgery (SSRF) vulnerability was found in galaxy_ng, the Ansible Galaxy server plugin for Pulp. An
CVE-2026-70551
A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data U
CVE-2026-55537
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, JobSubmitRequest.validate_webhook_url() accepts webh
CVE-2026-55535
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validate_webhook_url() path fails open
CVE-2026-55526
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spider_tools._host_is_blocked() does not resol
CVE-2026-55525
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the web_crawl function validates only the init
CVE-2026-79671
Ech0 through 4.2.1 contains a server-side request forgery vulnerability in the validateWebhookURL function (webhook_sett
CVE-2026-79659
Ech0 before 4.7.3 contains a server-side request forgery vulnerability in the fetchPeerConnectInfo function that uses un
CVE-2026-55976
Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated r
CVE-2026-78682
NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen (and callers nltk.data.l
CVE-2026-77310
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prio
CVE-2026-76838
Hi.Events validates a webhook destination only when it is registered, never when it is used. NoInternalUrlRule in backen
CVE-2026-76838
Hi.Events validates a webhook destination only when it is registered, never when it is used. NoInternalUrlRule in backen