brace-expansion: Large numeric range defeats documented `max` DoS protection

CVE-2026-45149

The `max` option was being applied too late: When expanding a single large numeric range like `{1..10000000}`, the sequ

历史摘要 · 未重新核验 · GitHub Advisory

form-data-objectizer: Prototype pollution in form-data-objectizer via bracket-notation form keys

CVE-2026-46510

## Summary `form-data-objectizer` walks bracket-notation form keys (e.g. `name[sub]`) into nested objects without filte

历史摘要 · 未重新核验 · GitHub Advisory

n8n-MCP: Workflow telemetry sanitizer could retain partial values from URL-shaped node parameters

CVE-2026-45582

## Summary In affected versions of n8n-mcp, the workflow telemetry sanitizer could retain partial fragments of URL-shap

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: `PUT /api/datasources/:datasourceId` is protected only by `TABLE/READ` permission instead of builder access, allowing any authenticated app user to overwrite datasourc...

CVE-2026-45717

## Summary Budibase exposes a REST API for datasource management. The route `PUT /api/datasources/:datasourceId` is reg

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: SSRF Bypass via HTTP Redirect in REST Datasource Integration

CVE-2026-45715

### Summary The REST datasource integration follows HTTP redirects without re-checking the IP blacklist, allowing an au

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: SSRF in AI Extract File Automation Step via Missing IP Blacklist Validation

CVE-2026-45548

## Vulnerability Details **CWE-918**: Server-Side Request Forgery (SSRF) The `processUrlFile` function in `packages/se

历史摘要 · 未重新核验 · GitHub Advisory

Better Auth: Rate limiter keys IPv6 addresses individually and is bypassable via prefix rotation

CVE-2026-45364

### Am I affected? Users are affected if all of the following are true: - Their app uses `better-auth` at a version `<

历史摘要 · 未重新核验 · GitHub Advisory

Better Auth: OAuth callback accepts mismatched `state` when cookie-backed state storage is used without PKCE

### Am I affected? Users are affected if all of the following are true: - The application uses `better-auth` at a vers

历史摘要 · 未重新核验 · GitHub Advisory

@joplin/onenote-converter: Path traversal in OneNote importer allows overwriting arbitrary files

CVE-2026-22810

### Summary A path traversal vulnerability in the OneNote importer allows overwriting arbitrary files on disk. ### Deta

历史摘要 · 未重新核验 · GitHub Advisory

vm2 Has a Sandbox Breakout Using Async Generator

CVE-2026-45411

### Summary VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape fro

历史摘要 · 未重新核验 · GitHub Advisory

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in @ranfdev/deepobj

CVE-2026-46509

### Impact Prototype pollution is possible when property paths contain `__proto__`/`constructor`/`prototype`. The proper

历史摘要 · 未重新核验 · GitHub Advisory

@utcp/http: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol

CVE-2026-45366

## Summary The `@utcp/http` package is vulnerable to a blind Server-Side Request Forgery (SSRF) caused by a trust-bound

历史摘要 · 未重新核验 · GitHub Advisory

@samanhappy/mcphub: SSE Endpoint Accepts Arbitrary Username from URL Path Without Authentication, Enabling User Impersonation

### Summary A critical identity spoofing vulnerability in MCPHub allows any unauthenticated user to impersonate any oth

历史摘要 · 未重新核验 · GitHub Advisory

Svelte: SSR XSS via Insecure Promise Serialization in hydratable

Contents of `hydratable` promises were not properly stringified, potentially leading to an XSS exploit. You are vulnerab

历史摘要 · 未重新核验 · GitHub Advisory

electerm's encrypt method not safe enough

CVE-2026-45787

### Impact _Insecure sync encryption: deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC lead

历史摘要 · 未重新核验 · GitHub Advisory

Electerm Local code through electerm's single-instance socket

CVE-2026-45353

### Impact _Local code execution without UI interaction: any same-user process can send a JSON payload to electerm's sin

历史摘要 · 未重新核验 · GitHub Advisory

DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval

CVE-2026-45311

### Summary The `run_tests` tool executes `cargo test` in the workspace with `ApprovalRequirement::Auto`, meaning it ru

历史摘要 · 未重新核验 · GitHub Advisory

DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch_url Tool

CVE-2026-45310

### Summary The `fetch_url` tool validates the initial URL's resolved IP address against a restricted-IP blocklist (`is_

历史摘要 · 未重新核验 · GitHub Advisory

Svelte Vulnerable to XSS via DOM Clobbering of Internal Framework State

CVE-2026-42573

Svelte was vulnerable to DOM clobbering of its internal framework state on elements, potentially leading to XSS attacks.

历史摘要 · 未重新核验 · GitHub Advisory

Svelte: ReDoS in `<svelte:element>` Tag Validation

CVE-2026-42567

An internal regex in the Svelte runtime can take exponential time to test in ``. You are only vulnerable to this if you

历史摘要 · 未重新核验 · GitHub Advisory