共收录 2023 条相关情报。
← 返回所有主题CVE-2026-16268
The Newsletters WordPress plugin before 4.16 does not authenticate or validate a bounce-processing request before fetchi
CVE-2026-19000
A vulnerability was identified in JeecgBoot up to 3.9.2. The affected element is an unknown function of the file /airag/
CVE-2026-18973
A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitiz
CVE-2026-34966
Gitea prior to 1.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to bypass
CVE-2026-55524
PraisonAI is a multi-agent teams system. In versions prior to 1.6.58, the web_crawl tool performs its SSRF check only on
CVE-2026-55523
PraisonAI is a multi-agent teams system. In versions 1.5.128 through 1.6.57, the praisonaiagents.tools.web_crawl_tools.w
CVE-2026-9081
IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery (SSRF) vulnerabil
CVE-2026-7657
IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery (SSRF) due to incomplete and inef
CVE-2026-17617
IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due to insuffici
CVE-2026-70605
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8,
CVE-2026-70595
Ghost is a Node.js content management system. From 6.26.0 until 6.54.1, a validation issue allowed some functionality, s
CVE-2026-18856
A vulnerability was determined in Poesis Rhymix CMS up to 2.1.33. This impacts the function procImporterAdminCheckXmlFil
CVE-2026-70620
Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attacke
CVE-2026-70591
### Impact A Server-Side Request Forgery (SSRF) in Ghost Admin allowed any staff-level user to perform a blind HTTP GET
CVE-2026-53946
### Impact When re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to
CVE-2026-53945
### Impact Ghost’s private-IP check for outbound HTTP requests could be bypassed via DNS rebinding, allowing an attacke
CVE-2026-53944
### Impact When making an external request, it is possible to bypass the IP filter that ensures the request isn't going
CVE-2026-54020
## Summary Open WebUI vetted user-supplied URLs by resolving the hostname once and rejecting private, loopback and link-
CVE-2026-70485
## Summary Open WebUI fetches user-supplied URLs on the server for RAG URL ingestion, URL-to-markdown conversion and we
CVE-2026-70480
## Summary Open WebUI renders `vega` and `vega-lite` fenced code blocks in chat content by building a Vega view in the v