Microsoft DirectX12: .spritefont multiply overflow only in 32-bit builds

### Impact The spritefont reader can be induced to perform a 32-bit overflow multiply that could in theory result in a R

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft DirectX: .spritefont multiply overflow only in 32-bit builds

### Impact The spritefont reader can be induced to perform a 32-bit overflow multiply that could in theory result in a R

历史摘要 · 未重新核验 · GitHub Advisory

Marten has an injection vulnerability in its full-text search regConfig parameter

CVE-2026-45288

## Summary Marten's full-text search APIs interpolated the user-supplied `regConfig` parameter directly into the genera

历史摘要 · 未重新核验 · GitHub Advisory

SharpCompress has directory traversal via directory entries in WriteToDirectory (zip slip variant)

CVE-2026-44788

### Summary A path traversal vulnerability in `IArchive.WriteToDirectory()` allows a malicious archive to create direct

历史摘要 · 未重新核验 · GitHub Advisory

OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured

CVE-2026-44213

### Summary The `OpenTelemetry.Exporter.Instana` NuGet package does not validate HTTPS/TLS certificates are valid when

历史摘要 · 未重新核验 · GitHub Advisory

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect

CVE-2026-44503

### Summary The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9

历史摘要 · 未重新核验 · GitHub Advisory

OpAMP client reads unbounded HTTP response bodies

CVE-2026-42348

### Summary When receiving responses from the OpAMP server over HTTP, the OpAMP client allocates an unbounded buffer to

历史摘要 · 未重新核验 · GitHub Advisory

YAFNET has Stored XSS in Forum Thread Posts/Replies that Allows Arbitrary JavaScript Execution for All Thread Viewers

CVE-2026-43939

**Description:** Stored Cross-Site Scripting (XSS) occurs when user-supplied input is persisted by the application and l

历史摘要 · 未重新核验 · GitHub Advisory

YAFNET: Pre-Handler Authorization Bypass on Admin Pages Enables Blind SQL Execution via `/Admin/RunSql`

CVE-2026-43937

**Issue Details:** YAFNET's only admin authorization gate is `PageSecurityCheckAttribute`, implemented as a `ResultFilte

历史摘要 · 未重新核验 · GitHub Advisory

YAFNET has Unauthenticated Stored Second-Order XSS in Admin Event Log via Reflected `User-Agent` Header

CVE-2026-43938

**Description:** Stored (second-order) Cross-Site Scripting (XSS) occurs when attacker-controlled input is persisted thr

历史摘要 · 未重新核验 · GitHub Advisory

OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter

CVE-2026-42191

### Summary The OTLP disk retry feature in `OpenTelemetry.Exporter.OpenTelemetryProtocol` silently fell back to `Path.G

历史摘要 · 未重新核验 · GitHub Advisory

OpenTelemetry's Zipkin remote endpoint cache could grow without bounds and increase memory pressure

CVE-2026-41310

### Summary The Zipkin exporter remote endpoint cache accepted unbounded key growth derived from span attributes. In hi

历史摘要 · 未重新核验 · GitHub Advisory