fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization

CVE-2026-110180

### Impact `fast-uri` versions `>= 2.4.2, = 3.1.3, = 4.0.1, <= 4.2.2` can silently rewrite the host of an HTTP-family U

历史摘要 · 未重新核验 · GitHub Advisory

fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references

CVE-2026-110725

### Impact `fast-uri`'s `serialize()`, `normalize()`, and `resolve()`, when called with the non-default option `referen

历史摘要 · 未重新核验 · GitHub Advisory

SvelteKit: URL redirection to untrusted site via enhanced form submission

CVE-2026-114060

### Impact Applications using enhanced form actions (`use:enhance`) on routes that accept paths beginning with `//`, suc

历史摘要 · 未重新核验 · GitHub Advisory

odf-kit has HTML injection leading to XSS in odsToHtml() via unescaped style attribute values

### Summary ODF style values are interpolated into `style="..."` attributes without HTML-escaping in odf-kit's ODS to-H

历史摘要 · 未重新核验 · GitHub Advisory

Electron: Mitigation for compromised eMudhra intermediate certificates

CVE-2026-115570

### Impact A set of eMudhra intermediate certificates were compromised and are being blocked by browsers and other TLS

历史摘要 · 未重新核验 · GitHub Advisory

body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

CVE-2026-111181

### Impact A single request can crash any application using `body-parser` with default options. When a request carries

历史摘要 · 未重新核验 · GitHub Advisory

Strands Agents SDK: Exposure of data element to wrong session in the A2A Server

CVE-2026-115419

**Summary** Strands Agents SDK is an open-source SDK, available for Python (strands-agents) and TypeScript (@strands-a

历史摘要 · 未重新核验 · GitHub Advisory

SvelteKit : XSS via untrusted cache-control header in prerendered page

CVE-2026-114061

### Impact Applications that prerender pages and use `setHeaders` to set a `cache-control` header from an untrusted sou

历史摘要 · 未重新核验 · GitHub Advisory

obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes

CVE-2026-115478

### Summary `create_entity`, `link_entities`, `rename_entity`, `unlink_entities` and `delete_entity` regenerate a memory

历史摘要 · 未重新核验 · GitHub Advisory

Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive

CVE-2026-114132

## Impact With the default `router.options.sensitive: false`, Nuxt's page router resolves routes case-insensitively, so

历史摘要 · 未重新核验 · GitHub Advisory

Nuxt server islands render `useHeadSafe` input without sanitisation

CVE-2026-114133

## Impact `useHeadSafe` restricts head input to an allowlist of safe tags and attributes. For example, `bodyAttrs` is l

历史摘要 · 未重新核验 · GitHub Advisory

Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled

CVE-2026-114130

## Impact An application that renders `` with a value it does not control can be made to render an anchor whose `href`

历史摘要 · 未重新核验 · GitHub Advisory

Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes

CVE-2026-114131

### Summary Nuxt compared `routeRules` keys against the raw request path, without decoding percent-encoding, while the

历史摘要 · 未重新核验 · GitHub Advisory

Electron: SameSite cookie restrictions are not applied to windows opened from links

CVE-2026-113796

### Impact Pages opened into a new window from a link were loaded as if the app itself had navigated there rather than

历史摘要 · 未重新核验 · GitHub Advisory

Electron: Pointer lock permission requests can be attributed to the wrong frame

CVE-2026-113798

### Impact For `pointerLock` permission requests made from some cross-origin iframes, `session.setPermissionRequestHandl

历史摘要 · 未重新核验 · GitHub Advisory

Electron: Extension tabs.query returns tab URLs and titles without the tabs permission

CVE-2026-113797

### Impact `chrome.tabs.query()` returned each tab's `url` and `title` to extensions that held neither the `tabs` permis

历史摘要 · 未重新核验 · GitHub Advisory

Electron: Frame subscription trusts GPU-supplied frame geometry

CVE-2026-114122

### Impact Frame data received from the GPU process for `webContents.beginFrameSubscription` was not fully validated by

历史摘要 · 未重新核验 · GitHub Advisory

Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry

CVE-2026-114124

### Impact In offscreen rendering mode on macOS, frame data received from the GPU process was not fully validated by the

历史摘要 · 未重新核验 · GitHub Advisory

Electron: openExternal permission requests can be attributed to the wrong origin

CVE-2026-114121

### Impact Requests to open external protocol URLs could be attributed to a document other than the one that asked for t

历史摘要 · 未重新核验 · GitHub Advisory

Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays

## Impact A vulnerability in applications using App router with Cache Component can lead to remote code execution. The

历史摘要 · 未重新核验 · GitHub Advisory