共收录 121 条相关情报。
← 返回所有主题CVE-2026-106119
LangChain is a framework for building LLM-powered applications. Prior to 1.3.1, MongoDBChatMessageHistory does not enfor
CVE-2026-105799
## Summary `@langchain/redis` did not properly escape values used to construct structured RediSearch TAG and TEXT filte
CVE-2026-105799
LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacke
CVE-2026-88029
### Impact When reading/writing via an ID with the GridFS API, require an exact match on the given ID. Otherwise, if a
CVE-2026-105681
Ghost is a Node.js content management system. From 5.9.0 until 6.44.1, an input validation issue allowed members to acce
CVE-2026-105675
Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invite
CVE-2026-105652
Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determine the re
CVE-2026-104956
Plane is an open-source project management tool. Prior to 1.4.0, the unauthenticated public issues endpoint accepts grou
CVE-2026-104956
Plane is an open-source project management tool. Prior to 1.4.0, the unauthenticated public issues endpoint accepts grou
CVE-2026-73976
djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, An unauthenticated
CVE-2026-73975
djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated de
CVE-2026-73976
djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, An unauthenticated
CVE-2026-73975
djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated de
CVE-2026-103289
Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated memb
CVE-2026-103258
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an unescaped parameter interpolation vulnerability in SendGr
CVE-2026-103250
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a NoSQL injection vulnerab
CVE-2026-103289
Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated memb
CVE-2026-103258
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an unescaped parameter interpolation vulnerability in SendGr
CVE-2026-103250
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a NoSQL injection vulnerab
CVE-2026-81914
Apache Airflow's Google provider built Google Drive search expressions by interpolating file and folder names directly i