Parse Server vulnerable to stored XSS via malformed Content-Type bypassing file upload extension blocklist

CVE-2026-61448

### Impact Parse Server's file upload validation uses the `fileUpload.fileExtensions` option (enabled by default with a

来源摘录 · GitHub Advisory

systeminformation vulnerable to Windows command injection in services() through Unicode quotation marks

CVE-2026-116576

### Summary On Windows, `systeminformation@5.33.15` builds a PowerShell command using the value passed to `services()`.

来源摘录 · GitHub Advisory

Backstage catalog rules can be bypassed for URL locations using encoded path segments

CVE-2026-115923

## Summary `@backstage/plugin-catalog-backend` matches URL-type locations against `catalog.rules` location patterns usi

历史摘要 · 未重新核验 · GitHub Advisory

Waline login accepts a non-string email as a match-all MongoDB query

## Summary The login endpoint POST /api/token reads the `email` field from the request body without checking its type a

历史摘要 · 未重新核验 · GitHub Advisory

Seroval: Code injection through a typed array's own constructor property

CVE-2026-116583

### Summary seroval writes a typed array as a call to its constructor. In affected versions, the constructor name in th

历史摘要 · 未重新核验 · GitHub Advisory

Seroval: Script injection through RegExp sources in serialized output

CVE-2026-116582

### Summary seroval writes a `RegExp` as a regular expression literal. In affected versions, the `` element that the se

历史摘要 · 未重新核验 · GitHub Advisory

Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)

CVE-2026-116581

### Summary `fromJSON` and `fromCrossJSON` used two node fields without checking them. - An array node's element list

历史摘要 · 未重新核验 · GitHub Advisory

Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length

CVE-2026-116584

### Summary `fromJSON` and `fromCrossJSON` did not check that an array node's element list is an array. A small crafted

历史摘要 · 未重新核验 · GitHub Advisory

Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check

CVE-2026-116580

### Summary When `fromJSON` rebuilt an async iterator, it called `on()` on the iterator's source without checking that

历史摘要 · 未重新核验 · GitHub Advisory

Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

CVE-2026-116575

Summary _build_session_scope() in mem0/memory/main.py builds the conversation-history scope key used to fetch/store the

历史摘要 · 未重新核验 · GitHub Advisory

decode-uri-component provides a more robust alternative to decodeURIComponent. Prior to 0.5.1, decodeUriComponent in index.js falls back to customDecodeURIComponent after native...

CVE-2026-118664

decode-uri-component provides a more robust alternative to decodeURIComponent. Prior to 0.5.1, decodeUriComponent in ind

来源摘录 · NVD / GitHub Advisory

Vite is a frontend tooling framework for JavaScript. From 6.4.4 until 6.4.5, the Vite development server can evaluate server.fs.deny before stripping loader query parameters suc...

CVE-2026-118662

Vite is a frontend tooling framework for JavaScript. From 6.4.4 until 6.4.5, the Vite development server can evaluate se

来源摘录 · NVD / GitHub Advisory

dd-trace: ReDOS in URL query string obfuscation

CVE-2026-116693

### Summary A regular expression used to obfuscate URL query strings can consume excessive CPU when processing certain

历史摘要 · 未重新核验 · GitHub Advisory

TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization

CVE-2026-116675

### Impact Stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via elements crafted thr

历史摘要 · 未重新核验 · GitHub Advisory

CKEditor: Cross-site scripting (XSS) in the engine package

CVE-2026-116687

### Impact A Cross-Site Scripting (XSS) vulnerability has been discovered in the CKEditor 5 engine. This vulnerability c

历史摘要 · 未重新核验 · GitHub Advisory

CKEditor: Cross-site scripting (XSS) in the engine package

CVE-2026-116688

### Impact A Cross-Site Scripting (XSS) vulnerability has been discovered in the CKEditor 5 engine. This vulnerability i

历史摘要 · 未重新核验 · GitHub Advisory

follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.2, the documented sensitiveHeaders option is checked wit...

CVE-2026-116689

follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16

来源摘录 · NVD / GitHub Advisory / OSV.dev

undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects

CVE-2026-109829

### Impact When an originless `Agent` composes the redirect and cache interceptors as `compose(redirect(), cache())` wi

历史摘要 · 未重新核验 · GitHub Advisory

undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent

CVE-2026-109383

### Impact undici's `Agent` passes its constructor options through a JSON-based deep clone (`JSON.parse(JSON.stringify(

历史摘要 · 未重新核验 · GitHub Advisory

undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation

CVE-2026-87018

## Impact undici crashes the client process when a TLS 1.2 server renegotiates after the connection is established and

历史摘要 · 未重新核验 · GitHub Advisory