CyberChef: Prototype pollution in Series Chart operation
CVE-2026-57439
On 5 June 2026 CyberChef received a security vulnerability report from @hyuunnn detailing a vulnerability in the Series
#npm
共收录 1041 条相关情报。
← 返回所有主题Language Servers for AWS vulnerable to arbitrary file write
CVE-2026-12958
## Summary Language Servers for AWS (the aws/language-servers project) provides the Language Server Protocol implementat
Language Servers for AWS Vulnerable to Arbitrary Code Execution
CVE-2026-12957
### Summary Language Servers for AWS (the aws/language-servers project) provide the underlying language-server runtime t
DistillGuard: Malicious NPM Package Detection and API Attack Chain Analysis via Static Graph and LLM Distillation
该论文针对 Node.js/NPM 生态中恶意包泛滥、软件供应链攻击频发的问题，提出了一套名为 DistillGuard 的轻量级恶意 NPM 包检测框架。作者指出，恶意代码主要在包安装、导入（import）和运行时三个阶段被触发，而现有防
elysia has Inefficient Algorithmic Complexity and Interpretation Conflict
CVE-2026-56669
Elysia v1.4.28 is vulnerable to denial-of-service attacks due to CPU exhaustion in the form data normalization code. El
ReactPress has SQL injection via dynamic column names in TypeORM query builders
CVE-2026-61685
## Summary ReactPress API list endpoints build TypeORM `QueryBuilder` conditions using unsanitized HTTP query parameter
OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widget
CVE-2026-77394
## Summary A user who can save a telemetry **screen** (permission `system_set`) can embed JavaScript in a screen `BUTTON
9router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade
CVE-2026-56679
### Summary The `PATCH /api/settings` endpoint writes the entire request body to persistent settings without a field whi
9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding
CVE-2026-56678
### Summary The Kiro API-key validation endpoint builds an upstream URL using a user-controlled `region` value. By supp
9router: Image prefetch DNS rebinding allows SSRF to internal services
CVE-2026-56676
## Summary 9router validates image URLs by resolving the host before fetching, but the later server-side fetch performs
9router /v1 APIs has unauthenticated access via reverse proxy locality collapse
CVE-2026-56675
## Summary 9router treats local loopback requests as trusted and allows access to `/v1/*` without an API key. In a docu
KEVGraph: Exploitation-Aware Dependency Vulnerability Remediation
依赖扫描工具通常会报出成百上千个漏洞，却基本不提供"可利用性感知"的排序，导致安全团队只能凭直觉决定先升级哪个包。业界主流的做法是按 CVSS 严重度排序，但该研究与真实在野利用情况存在结构性错位：在作者构建的 npm 语料中，有 186
File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer
CVE-2026-91127
### Summary Before 2.3.1, the legacy `.doc` renderer emitted document hyperlink targets after HTML escaping but without
adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)
CVE-2026-77301
### Summary adm-zip allocates an entry's output buffer from the declared uncompressed size (central-directory `size` fie
md-editor-v3: XSS via fenced-code language rendering bypass
CVE-2026-84992
### Summary `MdPreview` interpolates a fenced-code language into HTML attributes without escaping it. A crafted info str
@platejs/core HTML deserialization can trigger browser behavior during parsing
CVE-2026-88976
### Summary HTML strings passed to Plate's core deserialization APIs were parsed in the active document. Certain HTML a
Svelte devalue: DoS via malformed input
CVE-2026-81176
### Impact `devalue.parse` prior to version 5.9.2 fails to reject out-of-bounds indices. Specially-crafted payloads can
@nuxtjs/mdc's URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration
CVE-2026-63671
## Summary `@nuxtjs/mdc` renders untrusted markdown (including raw HTML) to a Vue component tree. Across two prior advi
node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion
CVE-2026-68904
SUMMARY ------- A combination of bugs in node-opcua causes unlimited TCP socket accumulation (FIN-WAIT-2 state) during a
CASHEWS: Source Preprocessor for LLM-based Malicious Package Detection
该论文聚焦于基于大语言模型的恶意 npm 包检测中的一个关键盲区:LLM 的上下文窗口有限,而攻击者可以利用 JavaScript 混淆制造极高的 token 密度,或把恶意代码与良性代码打包(bundling)在一起,使文件体积膨胀、超出