vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape

CVE-2026-44005

### Summary vm2's bridge exposes mutable proxies for real host-realm intrinsic prototypes and then forwards sandbox writ

历史摘要 · 未重新核验 · GitHub Advisory

vm2 Access to Host Object Enables Sandbox Escape

CVE-2026-43997

### Summary It is possible to obtain the host `Object`, https://github.com/patriksimek/vm2/commit/ebcfe94ad2f864f0bc35e

历史摘要 · 未重新核验 · GitHub Advisory

vm2 has a Sandbox Escape Vulnerability

CVE-2026-44006

### Summary It is possible to reach `BaseHandler.getPrototypeOf`, which can be used to get arbitrary prototypes ### De

历史摘要 · 未重新核验 · GitHub Advisory

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect

CVE-2026-44503

### Summary The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9

历史摘要 · 未重新核验 · GitHub Advisory

Vercel: Non-interactive mode includes CLI arguments in suggested command output

CVE-2026-44479

# Summary When the Vercel CLI runs in non-interactive mode (`--non-interactive` or auto-detected AI agent), commands th

历史摘要 · 未重新核验 · GitHub Advisory

Hono: bodyLimit() can be bypassed for chunked / unknown-length requests

CVE-2026-44456

## Summary `bodyLimit()` does not reliably enforce `maxSize` for requests without a usable `Content-Length` (e.g. `Tran

历史摘要 · 未重新核验 · GitHub Advisory

hono/jsx has Unvalidated JSX Tag Names that May Allow HTML Injection

CVE-2026-44455

## Summary Improper handling of JSX element tag names in hono/jsx allowed unvalidated tag names to be directly inserted

历史摘要 · 未重新核验 · GitHub Advisory

Angular SSR has Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

CVE-2026-44437

### Description A vulnerability exists in the `X-Forwarded-Prefix` header processing logic within Angular SSR. The inter

历史摘要 · 未重新核验 · GitHub Advisory

@axonflow/openclaw fix introduces plugin cache and credential-file permission hardening

## Summary Two related permission defects in this AxonFlow plugin allowed registration credentials and cache state to b

历史摘要 · 未重新核验 · GitHub Advisory

axonflow-sdk-typescript: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification

## Summary The AxonFlow SDK's `WebhookSubscription` (or equivalent) type did not expose the HMAC-SHA256 signing key ret

历史摘要 · 未重新核验 · GitHub Advisory

sse-channel: SSE Injection via unsanitized event fields

CVE-2026-44217

### Impact Implementations that allows user-provided values to be passed to `event`, `retry` or `id` fields would be su

历史摘要 · 未重新核验 · GitHub Advisory

ip-address has XSS in Address6 HTML-emitting methods

CVE-2026-42338

### Summary `Address6.group()` and `Address6.link()` do not HTML-escape attacker-controlled content before embedding it

历史摘要 · 未重新核验 · GitHub Advisory

Mongoose's Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection

CVE-2026-42334

### Impact This vulnerability allows bypassing Mongoose’s sanitizeFilter query sanitization mechanism via the `$nor` op

历史摘要 · 未重新核验 · GitHub Advisory

@evomap/evolver's validator sandbox allowlist permits `npm`/`npx`, yielding RCE from Hub-delivered validation tasks via lifecycle scripts

## Summary The validator-mode sandbox executor (`src/gep/validator/sandboxExecutor.js`) places `npm` and `npx` in its h

历史摘要 · 未重新核验 · GitHub Advisory

@evomap/evolver has an unbounded request body in proxy /asset/submit that causes persistent disk-exhaustion DoS

## Summary The EvoMap proxy daemon's HTTP body parser accepts requests of any size, and the `POST /asset/submit` route

历史摘要 · 未重新核验 · GitHub Advisory

@evomap/evolver: Path Traversal in `evolver fetch` default-branch `safeId` allows Hub-controlled overwrite of project files (RCE)

## Summary The `evolver fetch` subcommand in `index.js` writes Hub-supplied `bundled_files[]` into a directory derived

历史摘要 · 未重新核验 · GitHub Advisory

MagicMirror vulnerable to unauthenticated SSRF via /cors endpoint

CVE-2026-42281

### Summary An unauthenticated Server-Side Request Forgery (SSRF) vulnerability in the `/cors` endpoint allows any remo

历史摘要 · 未重新核验 · GitHub Advisory

open-websearch has SSRF in `fetchWebContent` MCP tool: bracketed IPv6 literals and non-resolving hostname check bypass `isPrivateOrLocalHostname`

CVE-2026-42260

### Summary `src/utils/urlSafety.ts` exposes `isPublicHttpUrl` / `assertPublicHttpUrl`, used to gate the MCP `fetchWebCo

历史摘要 · 未重新核验 · GitHub Advisory

parse-server: MFA SMS one-time password accepted twice under concurrent login

CVE-2026-43930

### Impact A race condition in the MFA SMS one-time password (OTP) login path allows two concurrent `/login` requests c

历史摘要 · 未重新核验 · GitHub Advisory

ssrfcheck Vulnerable to Server-Side Request Forgery (SSRF) and Incomplete List of Disallowed Inputs

CVE-2026-43929

### Summary `ssrfcheck` v1.3.0 (latest) fails to block Server-Side Request Forgery attacks when the target private IP a

历史摘要 · 未重新核验 · GitHub Advisory