dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions
CVE-2026-108380
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
#cwe-94
共收录 1460 条相关情报。
← 返回所有主题dataclasses-avroschema fixed namespaces allow code injection in generated annotations
CVE-2026-108379
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
dataclasses-avroschema record documentation can terminate generated class docstrings
CVE-2026-108378
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
dataclasses-avroschema allows code injection through generated Meta.schema_name
CVE-2026-108377
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts, JumpServer's Ansible-based automation rendering can evalu...
CVE-2026-104126
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts,
dataclasses-avroschema allows code injection through record names in generated default factories
CVE-2026-108376
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
dataclasses-avroschema allows code injection through generated field-default literals
CVE-2026-108375
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocation
CVE-2026-104126
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts,
FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an authenticated administrator can set an arbitrary Git repos...
CVE-2026-55695
FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an a
The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build....
CVE-2026-55675
The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb
Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow wit...
CVE-2026-55376
Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an
An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an auth...
CVE-2026-103965
An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during in
FearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updater
CVE-2026-55695
FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an a
Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets
CVE-2026-55675
The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb
heym Python Tool Sandbox Escape
CVE-2026-55376
Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an
A vulnerability has been found in storyicon comfyui_segment_anything up to ab6395596399d5048639cdab7e44ec9fae857a93. Affected by this issue is the function SLConfig._file2dict o...
CVE-2026-108962
A vulnerability has been found in storyicon comfyui_segment_anything up to ab6395596399d5048639cdab7e44ec9fae857a93. Aff
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.__init__ of the file paddlex/inference/models/text_detec...
CVE-2026-108961
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage
SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed...
CVE-2026-89107
SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition fun
A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is the function _load_text_config of the ...
CVE-2026-108957
A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The i
SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting lang...
CVE-2026-89107
SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition fun