GitHub Engagement Signals for CVE Prioritization: The GitHub Popularity Metric (GPM)

该论文针对漏洞管理中最核心的优先级排序难题提出了一个新的开源度量指标。背景问题是攻防不对称：攻击者只需利用一个漏洞即可同时攻陷大量系统，而防御者必须修补自身环境中的全部弱点。面对高速增长的漏洞披露量和高昂的补丁成本，防御方必须在有限时间内决

历史摘要 · 未重新核验 · arXiv cs.CR

No Title

[MOCK] 这是一个厂商公告的伪摘要: No Title

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

### Impact The output of `cilium-bugtool` can contain sensitive data when the tool is run against Cilium deployments wit

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

## Summary After a note-mark owner soft-deletes a public book, its notes and uploaded assets stay readable at `/api/not

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

## Summary `IsPasswordMatch` in `backend/db/models.go` falls back to a hard-coded `bcrypt("null")` placeholder whenever

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

**Summary** The zrok WebDAV drive backend (davServer.Dir) restricts path traversal through lexical normalization but doe

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

### Summary Heimdall performs rule matching on the raw (non-normalized) request path, while downstream components may n

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

CVE-2023-40267

### Summary `_clone()` validates `multi_options` as the original list, then executes `shlex.split(" ".join(multi_option

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

[MOCK] 这是一个厂商公告的伪摘要: No Title

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

[MOCK] 这是一个厂商公告的伪摘要: No Title

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

### Summary GitPython blocks dangerous Git options such as `--upload-pack` and `--receive-pack` by default, but the equi

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

[MOCK] 这是一个厂商公告的伪摘要: No Title

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

[MOCK] 这是一个厂商公告的伪摘要: No Title

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

[MOCK] 这是一个厂商公告的伪摘要: No Title

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026

历史摘要 · 未重新核验 · GitHub Security Advisories

No Title

### Summary The application fails to validate the ```nick``` parameter during a ```POST``` request to the ```EditUser```

历史摘要 · 未重新核验 · GitHub Security Advisories