共收录 2015 条相关情报。
← 返回所有主题CVE-2026-71366
A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends. The webhook, Matterm
CVE-2026-78385
RansomLook contains insufficient resource validation in the analysis PDF generation functionality. Analysis documents ar
CVE-2026-78277
Subscriber Server Side Request Forgery (SSRF) in FluentCRM Pro <= 3.1.12 versions.
CVE-2026-78269
Contributor Server Side Request Forgery (SSRF) in Shared Files <= 1.7.69 versions.
CVE-2026-10582
Hugo's security.http.urls allowlist is the only control on outbound fetches made by resources.GetRemote, and it inspects
CVE-2026-75975
fast-uri is a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not validate the complete IPv6
CVE-2026-75899
fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parse
CVE-2026-78205
BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link
CVE-2026-78205
BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link
CVE-2026-78061
A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/
CVE-2026-78061
A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/
CVE-2026-63311
NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the valid
CVE-2026-78003
The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) via path traversal in
CVE-2026-47735
CVE-2026-47735 是 Arc 时间序列数据库中一个严重的输入验证绕过漏洞。Arc 允许用户执行 SQL 查询，但其验证机制存在缺陷：仅使用简单的正则表达式黑名单阻止了 `read_parquet(` 和 `arc_partiti
CVE-2026-53509
CKAN MCP Server is a tool for querying CKAN open data portals. A known vulnerability CVE-2026-33060 indicated tools incl
CVE-2026-54457
TensorZero is an open-source LLMOps platform that unifies an LLM gateway, observability, evaluation, optimization, and e
CVE-2026-50288
SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, when `new URL()` throws a pars
CVE-2026-63004
Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the addon and integration subsy
CVE-2026-63004
## Summary Unleash's addon/integration subsystem lets an operator configure a webhook (and the Slack, Microsoft Teams,
CVE-2026-22681
OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege att