Apollo ConfigService access key authentication bypass via raw config file appId parsing

CVE-2026-59955

### Summary Apollo ConfigService may allow unauthorized access to raw configuration data when AccessKey / management key

历史摘要 · 未重新核验 · GitHub Advisory

Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching

CVE-2026-59954

### Summary Apollo ConfigService may allow unauthorized access to configuration data when AccessKey / management key aut

历史摘要 · 未重新核验 · GitHub Advisory

NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak

CVE-2026-49464

## Impact In versions from 1.5.0 up to and including 3.0.0, any authenticated portal user could complete and tamper wit

历史摘要 · 未重新核验 · GitHub Advisory

NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries

CVE-2026-49463

## Impact In versions up to and including 3.0.0, two parts of the GraphQL API returned data without checking whether th

历史摘要 · 未重新核验 · GitHub Advisory

DSpace: Path Traversal is possible through LDN message generation

CVE-2026-49833

## Overview A path traversal vulnerability is possible via the [COAR Notify / LDN](https://wiki.lyrasis.org/spaces/DSDO

历史摘要 · 未重新核验 · GitHub Advisory

DSpace: ORE resource URI does not validate scheme for non-web resources

CVE-2026-49830

## Overview When ingesting an aggregated ORE resource by URI (using the [OAI-ORE Harvester](https://wiki.lyrasis.org/sp

历史摘要 · 未重新核验 · GitHub Advisory

DSpace has a possible Path Traversal Vulnerability in its Curation Task Reporter output path

CVE-2026-49831

## Overview The [Curation Task](https://wiki.lyrasis.org/spaces/DSDOC9x/pages/379126845/Curation+Tasks) feature allows

历史摘要 · 未重新核验 · GitHub Advisory

DSpace has possible Remote Code Execution (RCE) through Velocity Templates used by LDN

CVE-2026-49832

## Overview Remote Code Execution (RCE) is possible via Velocity Templates used by DSpace for [COAR Notify/LDN messages

历史摘要 · 未重新核验 · GitHub Advisory

OpenRemote has Authenticated SQL Injection via Datapoint Crosstab Export

## Summary The datapoint export API builds a PostgreSQL crosstab export query by concatenating asset display names into

历史摘要 · 未重新核验 · GitHub Advisory

OpenRemote has an incomplete fix for CVE-2026-40882: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory

CVE-2026-54640

### Summary The fix for CVE-2026-40882 addressed only the Velbus asset import handler. The KNX asset import handler (`KN

历史摘要 · 未重新核验 · GitHub Advisory

OpenRemote has Cross-Realm User Information Disclosure in UserResourceImpl

CVE-2026-54641

### Summary A realm admin of tenant B can read the profile, client roles, and realm roles of any user in any other real

历史摘要 · 未重新核验 · GitHub Advisory

LaunchServer FileServerHandler has an unauthenticated path traversal issue

CVE-2026-54617

### Summary An unauthenticated path traversal in the LaunchServer HTTP file server (`FileServerHandler`) lets any remote

历史摘要 · 未重新核验 · GitHub Advisory

Keycloak: Unauthorized access via improper validation of encrypted SAML assertions

CVE-2026-2092

Keycloak's SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not si

历史摘要 · 未重新核验 · GitHub Advisory

OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms

CVE-2026-53712

## Summary A flaw in `com.ongres.scram:scram-client` allows an attacker capable of performing a TLS man-in-the-middle (

历史摘要 · 未重新核验 · GitHub Advisory

Keycloak has privilege escalation via improper scope mapping enforcement

CVE-2026-9795

### Description A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature. An administrator with li

历史摘要 · 未重新核验 · GitHub Advisory

land.oras:oras-java-sdk: Symlink-based path traversal in ArchiveUtils.untar / unzip allows arbitrary file write outside extraction directory

### Summary `ArchiveUtils.untar(InputStream, Path)` and `ArchiveUtils.unzip(InputStream, Path)` in `land.oras:oras-java

历史摘要 · 未重新核验 · GitHub Advisory

Sigstore Java has a vulnerability with bundle verification of integratedTime

CVE-2026-48791

### Summary Regression: Verification of `integratedTime` from Rekor V1 Log Entry against Fuclio Certificate validity was

历史摘要 · 未重新核验 · GitHub Advisory

OpenAM OAuth Authorization Bypass via PKCE Challenge

CVE-2026-48717

## Summary **Description** An Improper Authorization (CWE-285) issue in OpenAM's OAuth2 authorization-code grant allow

历史摘要 · 未重新核验 · GitHub Advisory

OpenAM OAuth Client Impersonation via JWKS Resolver Cache

CVE-2026-47426

## Summary **Description** An Improper Authentication (CWE-287) issue in OpenAM's OAuth2 private_key_jwt client authen

历史摘要 · 未重新核验 · GitHub Advisory

OpenAM Authenticated RCE via Groovy Sandbox Escape

CVE-2026-47424

## Summary **Description** A Protection Mechanism Failure (CWE-693) in OpenAM's server-side scripting sandbox allows a

历史摘要 · 未重新核验 · GitHub Advisory