JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs
CVE-2026-102904
JupyterLab's PyPI extension manager runs `python -m pip uninstall` with the extension name taken from the request body.
#pip
共收录 834 条相关情报。
← 返回所有主题JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard
CVE-2026-102831
## Description JupyterLab 4.5.0 enabled copying and pasing cells through the system clipboard. The paste path parses cl
PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation
CVE-2026-102266
### Summary A service that verifies HS256 tokens using an empty oct JWK through PyJWK, including a PyJWK obtained from
PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header
CVE-2026-102265
## Package pyjwt (PyPI) ## Affected versions tested & verified on: 2.13.0. Every version whose `PyJWS._load()` transl
PyJWT: Non-canonical signature segments enable raw-token revocation bypass
CVE-2026-102269
## Summary PyJWT 2.13.0 accepts compact JWS signature segments containing characters that are not in the Base64URL alph
PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard
CVE-2026-102268
**Prerequisites** (both conditions must hold; both are deployment properties, not attacker-controlled at request time):
PyJWT accepts public JWK containers as HMAC secrets
CVE-2026-102273
### Summary PyJWT 2.13.0 contains an incomplete defense against algorithm confusion when an application mixes symmetric
PyJWT: PyJWKClient follows redirects when fetching JWKS
CVE-2026-102267
### Summary PyJWT 2.13.0 `PyJWKClient` followed HTTP redirects while fetching a JWKS, without validating the redirect d
PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard
CVE-2026-102271
### Summary `HMACAlgorithm.prepare_key` blocks asymmetric keys from being used as HMAC secrets by searching for text ma
PyJWT BOM Bypass
CVE-2026-102272
## Affected Package - **Package**: PyJWT (`pyjwt` on PyPI) - **Repository**: https://www.google.com/url?q=https://githu
PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)
CVE-2026-101917
Summary CVE-2026-48524 (GHSA-fhv5-28vv-h8m8, "PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid v
SCBE-AETHERMOORE Unauthenticated AetherBrowser Ops API Exposes Operator Email Digests
CVE-2026-57443
### Summary The AetherBrowser API server (`scripts/aetherbrowser/api_server.py`) exposes the `POST /api/ops/check-email
khoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystem
### Summary The `/home/{file_path:path}` endpoint in `web_client.py` serves static files by directly concatenating the u
social-auth-core has a Session Fixation issue
CVE-2026-57179
### Impact The partial-pipeline resume mechanism accepted `partial_token` as a bearer credential without binding it to
social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing
CVE-2026-57178
### Impact The `vk-app` backend accepted VK application callback data without verifying the callback signature when the
social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend
CVE-2026-57177
### Impact The LoginRadius backend did not validate OAuth state during the authentication flow. Applications using thi
social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend
CVE-2026-57176
### Impact The Vend OAuth2 backend used only the numeric Vend `user_id` as the social-auth UID. When multiple Vend sho
social-auth-core has an Improper Authentication issue
CVE-2026-57175
### Impact The SAML backend accepted SAML responses on the Assertion Consumer Service endpoint without verifying that t
Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)
CVE-2026-57171
**At a glance** - **Actor:** attacker who controls the -o/--output argument to trestle author {catalog,profile,ssp}-gen
Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)
CVE-2026-57170
Reporter: Cavan Loughran, Celvex Group Inc. Summary ------- The fix for CVE-2026-46439 (3.12.2 / 4.0.3) removed the rec