Nuxt dev server discloses project root and workspace UUID via the Chrome DevTools workspace endpoint

### Impact When a Nuxt dev server is bound to a network-reachable interface (for example `nuxt dev --host` for on-devic

历史摘要 · 未重新核验 · GitHub Advisory

DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS

### Summary During `IN_PLACE` sanitization, a hook that removes an element can leave that element's detached descendant

历史摘要 · 未重新核验 · GitHub Advisory

node-re2: Out-of-bounds heap read in `replace`/`split` via a `Buffer` ending in a truncated multi-byte UTF-8 character → adjacent heap memory disclosed to JavaScript

CVE-2026-71498

## Summary `re2` infers a character's byte length from its UTF-8 lead byte alone, with no bound on the bytes actually r

历史摘要 · 未重新核验 · GitHub Advisory

node-re2: String.prototype.replace(re2, template) aborts the Node process (uncatchable ToLocalChecked on empty MaybeLocal) when the result exceeds V8's max string length

CVE-2026-71430

## Description `WrappedRE2::Replace` builds the replacement result and hands it to V8 with `.ToLocalChecked()` **withou

历史摘要 · 未重新核验 · GitHub Advisory

ngx-extended-pdf-viewer bundles a version of pdf.js vulnerable to CVE-2026-16633

ngx-extended-pdf-viewer embeds a fork of Mozilla's pdf.js rather than depending on pdfjs-dist, so this vulnerability is

历史摘要 · 未重新核验 · GitHub Advisory

PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF

CVE-2026-16633

### Impact If PDF.js is used to load a malicious PDF, and PDF.js is configured with `enableScripting` set to true (whic

历史摘要 · 未重新核验 · GitHub Advisory

JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported

# Quadratic CPU consumption in `!!omap` resolution (js-yaml 3.x and 4.x) ## Summary `resolveYamlOmap()` enforces key u

历史摘要 · 未重新核验 · GitHub Advisory

Nx: Zip-Slip in the self-hosted remote cache

CVE-2026-71476

## Summary The Nx **self-hosted HTTP remote cache** extracts downloaded cache artifacts without constraining where file

历史摘要 · 未重新核验 · GitHub Advisory

Mermaid radar diagrams are vulnerable to DoS

CVE-2026-71439

### Impact Mermaid radar diagrams allow arbitrary large values for `ticks`, which can cause high CPU usage, freezing th

历史摘要 · 未重新核验 · GitHub Advisory

Mermaid configuration APIs allow prototype pollution

CVE-2026-71438

### Summary Mermaid's configuration setters (`mermaid.initialize`, `mermaidAPI.setConfig`, and `mermaidAPI.updateSiteCo

历史摘要 · 未重新核验 · GitHub Advisory

Mermaid allows CSS injection applying to sibling elements of the diagram

CVE-2026-50159

### Summary Mermaid does not fully restrict CSS to the rendered SVG subtree. Although selectors are prefixed with `#mer

历史摘要 · 未重新核验 · GitHub Advisory

Mermaid Architecture diagrams are vulnerable to prototype pollution

CVE-2026-71437

Rendering an untrusted `architecture-beta` diagram lets the diagram author write an arbitrary property with the value `h

历史摘要 · 未重新核验 · GitHub Advisory

Ghost: Paid gift memberships obtainable at minimal cost via the donations feature

CVE-2026-59817

### Impact A vulnerability in Ghost's public donation checkout flow allowed an unauthenticated attacker to obtain full

历史摘要 · 未重新核验 · GitHub Advisory

Ghost: Member existence leak via magic link sign-in response

CVE-2026-53947

### Impact A discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacke

历史摘要 · 未重新核验 · GitHub Advisory

XSS in Ghost's ActivityPub client

CVE-2026-53950

### Impact The ActivityPub client in Ghost was vulnerable to JavaScript injection on posts shared by a maliciously cust

历史摘要 · 未重新核验 · GitHub Advisory

Ghost: Session Fixation in Ghost Admin

CVE-2026-70594

### Impact Ghost Admin did not invalidate existing sessions on login which could have allowed for session fixation atta

历史摘要 · 未重新核验 · GitHub Advisory

Ghost: Theme Upload Path Traversal

CVE-2026-70593

### Impact A vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This

历史摘要 · 未重新核验 · GitHub Advisory

Ghost: Database Backup Path Traversal

CVE-2026-70592

### Impact An Administrator-level user could remotely overwrite certain files on the filesystem leading to integrity an

历史摘要 · 未重新核验 · GitHub Advisory

Ghost: Server-Side Request Forgery in Image Fetching

CVE-2026-70591

### Impact A Server-Side Request Forgery (SSRF) in Ghost Admin allowed any staff-level user to perform a blind HTTP GET

历史摘要 · 未重新核验 · GitHub Advisory

Ghost: Blind Password Hash Disclosure in Ghost Admin API

CVE-2026-70590

### Impact Any staff-level user was able to leak the hashed passwords of other staff users. An offline password-guessin

历史摘要 · 未重新核验 · GitHub Advisory