Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request h...

CVE-2026-63004

## Summary Unleash's addon/integration subsystem lets an operator configure a webhook (and the Slack, Microsoft Teams,

历史摘要 · 未重新核验 · GitHub Advisory

Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatter

CVE-2026-63462

## Summary An unauthenticated `POST` to any OpenAPI-validated endpoint, including the anonymous `POST /edge/validate` a

历史摘要 · 未重新核验 · GitHub Advisory

gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

CVE-2026-55451

### Impact `js2i18next()` is vulnerable to prototype pollution. When converting translations, it splits nested keys on

历史摘要 · 未重新核验 · GitHub Advisory

NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution

## Executive Summary Two vulnerabilities were identified and chained to achieve authenticated remote code execution Th

历史摘要 · 未重新核验 · GitHub Advisory

Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root

CVE-2026-63123

### Summary A browser-based cross-origin request flaw in the Tina dev server allows an attacker-controlled website to ca

历史摘要 · 未重新核验 · GitHub Advisory

Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

CVE-2026-59992

## Summary The production media handler shipped by `next-tinacms-s3` (`createMediaHandler` in `packages/next-tinacms-s3

历史摘要 · 未重新核验 · GitHub Advisory

logto-tunnel serves files outside --experience-path via path traversal

CVE-2026-63188

### Summary `@logto/tunnel` serves custom sign-in experience files from the `--experience-path` directory. When the tun

历史摘要 · 未重新核验 · GitHub Advisory

SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses

### Summary mcp-searxng version 1.11.0 exposes SearXNG Basic Authentication credentials embedded in the `SEARXNG_URL` e

历史摘要 · 未重新核验 · GitHub Advisory

SearXNG MCP Server: Additional hardened-mode SSRF bypasses

CVE-2026-54689

## Summary `mcp-searxng` has a hardened-mode URL-reading feature intended to prevent `web_url_read` from reaching priva

历史摘要 · 未重新核验 · GitHub Advisory

SearXNG MCP Server is Vulnerable to SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)

CVE-2026-54688

Ref: https://github.com/ihor-sokoliuk/mcp-searxng/issues/87#issuecomment-4645453694 ### Summary The web_url_read tool

历史摘要 · 未重新核验 · GitHub Advisory

Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint

CVE-2026-53957

### Summary `export_space` and `import_space` tools in `@contentful/mcp-tools` accept LLM-controlled `host` and `proxy`

历史摘要 · 未重新核验 · GitHub Advisory

claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

### Summary `claude-faf-mcp` MCP tools accept a caller-controlled `path` argument and resolve it (`~` expansion + `path.

历史摘要 · 未重新核验 · GitHub Advisory

faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

### Summary `faf-mcp` MCP tools accept a caller-controlled `path` argument and resolve it (`~` expansion + `path.resolve

历史摘要 · 未重新核验 · GitHub Advisory

grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools

### Summary Several `grok-faf-mcp` MCP tools accept a caller-controlled `path` argument and resolve it (`~` expansion +

历史摘要 · 未重新核验 · GitHub Advisory

MeshCentral has unsanitized data fields

### Description A rogue or compromised MeshAgent can inject arbitrary HTML/JavaScript via the osdesc (OS description) f

历史摘要 · 未重新核验 · GitHub Advisory

MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id

CVE-2026-69148

### Summary The `_validate_source_run` and `_validate_source_model` functions in `mlflow/server/handlers.py` verify tha

历史摘要 · 未重新核验 · GitHub Advisory

MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

CVE-2026-69146

### Summary When MLflow is deployed with the built-in basic-auth plugin (`--app-name basic-auth`), any authenticated us

历史摘要 · 未重新核验 · GitHub Advisory

9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint

CVE-2026-56677

### Summary A Server-Side Request Forgery (SSRF) vulnerability exists in the 9Router dashboard via the `/api/auth/oidc/

历史摘要 · 未重新核验 · GitHub Advisory

chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots

CVE-2026-53766

### Summary I originally reported this through Google Bug Hunters. The Google Bug Hunters team said this is in OSS VRP

历史摘要 · 未重新核验 · GitHub Advisory

Etherpad has stored XSS in HTML export via unescaped attribute-pool values

CVE-2026-55090

Fix: PR #7905 (ether/etherpad). `getHTMLFromAtext` in `src/node/utils/ExportHtml.ts` interpolates values from the `expo

历史摘要 · 未重新核验 · GitHub Advisory