Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory

CVE-2026-118761

## Summary The Kubeflow Pipelines API server decompresses uploaded pipeline archives without adequately bounding expand

来源摘录 · GitHub Advisory

Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs

CVE-2026-118759

## Summary The Kubeflow Pipelines API server's `GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log` handler retrieves

来源摘录 · GitHub Advisory

imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution

## Summary The ICO loader allocates `data_size + BMP_FILE_HEADER_LEN` bytes after reading a 32-bit attacker-controlled

来源摘录 · GitHub Advisory

imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash

### Summary Out-of-bounds heap write in imgproxy's ICO loader (`vips/icoload.c`): when the ICO entry's image data buffe

来源摘录 · GitHub Advisory

imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field

### Summary Unbounded and unvalidated memory allocation in imgproxy's ICO loader (`vips/icoload.c`). An attacker-contro

来源摘录 · GitHub Advisory

anacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoS

## Summary anacrolix/torrent's bencode decoder (`bencode/`) applies **no limit on the nesting depth** of nested diction

来源摘录 · GitHub Advisory

Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware's validateDomain wildcard matcher in middleware/cors/utils.go strips the ...

CVE-2026-119285

Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware's validateDomain

来源摘录 · NVD / GitHub Advisory / OSV.dev

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives witho...

CVE-2026-118761

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the

来源摘录 · NVD / GitHub Advisory

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/{run_id}/nodes/{nod...

CVE-2026-118759

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the

来源摘录 · NVD / GitHub Advisory

cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials

CVE-2026-62290

## Summary `Challenge` resources under `acme.cert-manager.io` can be created directly by namespace users. On create, ce

来源摘录 · GitHub Advisory

Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware

CVE-2026-62160

### Summary Daptin's `LanguageMiddleware` (registered as a global gin middleware) calls `golang.org/x/text/language.Par

来源摘录 · GitHub Advisory

knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion

## ⚠️ Update (verification, 2026-05-19): C-2 confirmed end-to-end — **4.5× amplification observed** (worse than the advi

历史摘要 · 未重新核验 · GitHub Advisory

Go JOSE: Panics in JSON parsing

CVE-2026-116586

### Summary Parsing deeply nested JSON structures can hit Go's stack limit, causing the application to crash. Note: th

历史摘要 · 未重新核验 · GitHub Advisory

Neko: Authorization bypass in legacy WebRTC input handling

CVE-2026-116679

### Impact When legacy mode is enabled and `session.implicit_hosting` is enabled, the legacy WebRTC data channel incorr

历史摘要 · 未重新核验 · GitHub Advisory

Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan

CVE-2026-116676

### Summary Atlantis passes the Terraform `workspace` value from a pull request's `atlantis.yaml` into a shell command

历史摘要 · 未重新核验 · GitHub Advisory

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory

CVE-2026-116682

## Summary File read paths resolve symbolic links with `filepath.EvalSymlinks` and then operate on the resolved target

历史摘要 · 未重新核验 · GitHub Advisory

Go JOSE: DoS when parsing JWKs that contain RSA keys

CVE-2026-116587

### Summary A crafted RSA key inside a JWK can cause operations that parse JWKs to consume excess CPU. ### Details go

历史摘要 · 未重新核验 · GitHub Advisory

CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values

CVE-2026-116683

### Impact CTFer.io's CTFd Terraform Provider stores `ctfd_team.password` as non-sensitive values (CWE-522). A local or

历史摘要 · 未重新核验 · GitHub Advisory

chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For

CVE-2026-114437

### Summary `ClientIPFromXFF` skips any `X-Forwarded-For` entry in a configured trusted CIDR but never verifies that th

历史摘要 · 未重新核验 · GitHub Advisory

Echo: X-Real-IP extractor trusts the header value instead of the sending peer

## Impact In Echo v5, `ExtractIPFromRealIPHeader` checked whether the address supplied in `X-Real-IP` belonged to a tru

历史摘要 · 未重新核验 · GitHub Advisory