Next.js has Server-Side Request Forgery in Image Optimization
CVE-2026-94483
## Impact An attacker-controlled, allow-listed remote URL can lead to server-side request forgery (e.g. to private IPs)
#npm
共收录 1041 条相关情报。
← 返回所有主题Payload: SQL injection in SQLite/Postgres
CVE-2026-105856
### Impact An attacker who has read plus create or update access to a collection can submit a request that includes a S
Payload: Remote Code Execution through first-register
CVE-2026-105858
### Impact A crafted request to the public first-register operation can be used to perform a RCE exploit. **You are aff
knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json
CVE-2026-86540
## Overview A critical **Arbitrary Code Execution (ACE)** vulnerability exists in the Knowns Language Server Protocol (
Payload didn't enforce field-level password update restrictions
CVE-2026-105855
## Impact When an auth collection defined a field-level access.update restriction on the password field, the restrictio
Payload: ReDoS in Multipart Content-Type Validation
CVE-2026-105854
## Impact A malformed multipart request body could take an extremely long time to finish. ## Patches Users should upgra
Payload vulnerable to API key disclosure through ordinary document reads
CVE-2026-105849
### Impact Users with read access to other user documents could access their active API keys. An exposed key grants the
Payload Ecommerce has an order confirmation validation issue
CVE-2026-105850
## Impact When using the Stripe payment adapter, an order confirmation could be processed more than once under certain c
Payload relationship-query authorization bypass
CVE-2026-105852
## Impact A readable collection could expose information about protected documents in a related collection. **You are
Payload: Token refresh and password reset responses may expose restricted user fields
CVE-2026-105853
## Impact Token refresh and password reset responses could return fields that the requesting user did not have access t
Payload: Field access control bypass on auth collections
CVE-2026-105851
## Impact Payload's duplicate operation copies field values from the source document even when a field is hidden, or it
Payload: Insufficient Access Control in Stripe REST Proxy
CVE-2026-105848
## Impact An authenticated user could perform unintended Stripe operations through the optional Stripe REST proxy. **Y
Payload: Improper access control for MCP API keys
CVE-2026-105806
### Impact Under certain conditions, an authenticated user could manage MCP API keys outside their intended account allo
Payload: Prototype pollution in Payload Import Export plugin
CVE-2026-105844
### Impact An unauthenticated user could cause unintended application behavior when the Import Export plugin is enabled,
Payload: SQL Injection in SQLite and Postgres
CVE-2026-105845
### Impact A user can submit a request that exploits a SQL Injection vulnerability in Payload. You are affected if: - Y
Payload: Untrusted redirect URL parameter exploit
CVE-2026-105846
### Impact Under certain conditions, an attacker can craft a redirect link that sends a guest user to an untrusted desti
Payload: Polymorphic join queries could disclose hidden fields
CVE-2026-105847
### Impact A user with query access could use polymorphic join filters to infer hidden or read-restricted field values,
Payload: Password hashes use insufficient PBKDF2 iterations
CVE-2026-105804
### Impact The password-hashing configuration used a lower work factor than what is recommended. ### Patches Payload no
Payload: Sort queries could expose protected field information
CVE-2026-105805
### Impact Under certain conditions, sorting readable records could reveal limited information about fields the requeste
MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server
CVE-2026-104850
### Summary In affected versions, the SDK's OAuth client let the MCP server decide which authorization server received t