Klever-Go KVM: Unauthenticated remote node crash (nil-pointer DoS) in klever-go P2P transaction interceptor (txVersionChecker nil RawData) - potential chain halt

## Summary Every transaction gossiped on the klever-go P2P network is decoded and validated synchronously inside the lib

历史摘要 · 未重新核验 · GitHub Advisory

klever-go: REST API slow-header connection exhaustion via Gin Engine.Run

### Summary The Klever seednode REST API starts a Gin engine with `Engine.Run(restAPIInterface)`. In Gin v1.9.1, `Engin

历史摘要 · 未重新核验 · GitHub Advisory

klever-go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS

### Summary `networkMessenger.directMessageHandler` in `network/p2p/libp2p/netMessenger.go` spawns a fresh goroutine fo

历史摘要 · 未重新核验 · GitHub Advisory

Klever-Go KVM: Throttler slot leak in trie account-data sync causes epoch bootstrap / state sync DoS

CVE-2026-49343

## Summary The account-data trie syncers leak bounded throttler slots on error paths in `syncDataTrie()`. Each failed

历史摘要 · 未重新核验 · GitHub Advisory

Source controller: Improper path handling allows traversal

CVE-2026-47680

### Impact An actor with the ability to influence the contents of a bucket referenced by a `Bucket` resource can cause

历史摘要 · 未重新核验 · GitHub Advisory

quic-go: HTTP/3 QPACK Trailer Expansion Memory Exhaustion

CVE-2026-40898

## Summary An attacker can cause excessive memory allocation in quic-go's HTTP/3 client and server implementations by s

历史摘要 · 未重新核验 · GitHub Advisory

Nezha's authenticated agents can forge service-monitor results for other users' services

CVE-2026-48119

#### Summary Nezha accepts service-monitor `TaskResult` messages from an authenticated agent based only on whether the

历史摘要 · 未重新核验 · GitHub Advisory

Nezha's authenticated DDNS webhook configuration allows blind SSRF from the dashboard host

CVE-2026-47268

#### Summary An authenticated Nezha dashboard user can create or update a DDNS profile with provider `webhook` and conf

历史摘要 · 未重新核验 · GitHub Advisory

Authelia Missing Username Canonicalization in Basic Auth (LDAP)

CVE-2026-47203

### Impact **CVSSv4 Baseline Score:** Moderate 6.3 **CVSSv4 Weighted Score:** Low 2.9 The full CVSSv4 Vector for this

历史摘要 · 未重新核验 · GitHub Advisory

authentik's XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user

CVE-2026-47201

### Summary authentik's SAML Source ACS endpoint is vulnerable to XML Signature Wrapping when validating upstream SAM

历史摘要 · 未重新核验 · GitHub Advisory

go-git: Malformed Git object data may cause panics or resource exhaustion

### Impact Several denial-of-service issues were identified in `go-git` when parsing maliciously crafted Git repository

历史摘要 · 未重新核验 · GitHub Advisory

CAPM3 vulnerable to Cross-Namespace resource access

## Summary CAPM3 is Metal3's Cluster API (CAPI) provider for baremetal provisioning in Kubernetes. Multiple cross-names

历史摘要 · 未重新核验 · GitHub Advisory

Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs

CVE-2026-47243

### Summary In the runtime-rs standalone virtio-fs path, verified here with QEMU (and verified with Cloud Hypervisor to

历史摘要 · 未重新核验 · GitHub Advisory

CrowdSec AppSec silently drops request body for chunked / HTTP-2 requests

CVE-2026-44982

## Summary The CrowdSec AppSec component fails to read the HTTP request body for any request whose `Content-Length` is

历史摘要 · 未重新核验 · GitHub Advisory

CrowdSec LAPI: Denial of Service via Unbounded Gzip Decompression

CVE-2026-44981

The LAPI router uses `gin-contrib/gzip` with `DefaultDecompressHandle` globally (`pkg/apiserver/controllers/controller.g

历史摘要 · 未重新核验 · GitHub Advisory

Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations

CVE-2026-44210

## Summary Kata Containers ships with a default configuration that allows pod creators to inject arbitrary command-line

历史摘要 · 未重新核验 · GitHub Advisory

Nezha Monitoring: Nezha WebSocket server stream discloses cross-tenant server telemetry to authenticated members

CVE-2026-47124

Nezha Monitoring 是一个开源监控系统，其仪表板 WebSocket 端点存在授权绕过漏洞（CVE-2026-47124）。任何经过认证的非管理员成员都可以连接到 `/api/v1/ws/server` WebSocket 并

历史摘要 · 未重新核验 · GitHub Advisory

Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron

CVE-2026-46716

Nezha监控系统存在一个严重的权限绕过漏洞（CVE-2026-46716）。该组件是一个开源的服务器监控和运维管理平台，支持管理员（RoleAdmin）和普通成员（RoleMember）两种角色。漏洞位于定时任务相关的API端点（POST

历史摘要 · 未重新核验 · GitHub Advisory

Arcane: Missing admin authorization on global variables endpoint

CVE-2026-47125

Arcane 后端项目中，`PUT /api/environments/{id}/templates/variables` 端点用于写入全局 `.env.global` 文件，该文件中的变量会被所有项目的 Docker Compose 文件

历史摘要 · 未重新核验 · GitHub Advisory

Nezha Monitoring: RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks (no ownership check)

CVE-2026-47120

## Summary `createAlertRule` and `createService` (and their `update*` siblings) accept `FailTriggerTasks []uint64` and

历史摘要 · 未重新核验 · GitHub Advisory