Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority

CVE-2026-71317

## Summary Repo under test: https://github.com/Netflix/lemur When `ADMIN_ONLY_AUTHORITY_CREATION=False` (an explicitly

历史摘要 · 未重新核验 · GitHub Advisory

Lemur: Unchecked `replaces[]` lets any user silence notifications and hijack auto-rotation for arbitrary certificates

CVE-2026-71308

## Summary Repo under test: https://github.com/Netflix/lemur The certificate create and upload endpoints accept a `rep

历史摘要 · 未重新核验 · GitHub Advisory

Lemur: Authenticated low-privilege users can read plaintext destination credentials (SFTP password / private-key passphrase) via the destinations API

CVE-2026-71307

### Summary Lemur's destination read endpoints -- `GET /api/1/destinations` and `GET /api/1/destinations/` -- return the

历史摘要 · 未重新核验 · GitHub Advisory

Lemur: Incomplete fix for GHSA-v2wp-frmc-5q3v -- ACME authority update endpoint allows non-admin to replace `acme_url` with internal IP, bypassing allowlist

CVE-2026-71303

### Summary The fix for GHSA-v2wp-frmc-5q3v added `_validate_acme_url()` to reject `acme_url` values not in `ACME_DIREC

历史摘要 · 未重新核验 · GitHub Advisory

Lemur: SSRF protection in certificate revocation checking bypassable via HTTP redirects and DNS rebinding (incomplete fix for GHSA-54vg-pfh7-jq95)

CVE-2026-70667

## Summary The SSRF mitigation added for GHSA-54vg-pfh7-jq95 (`_validate_revocation_url()` in `lemur /certificates/verif

历史摘要 · 未重新核验 · GitHub Advisory

Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLs

CVE-2026-70666

### Summary The ACME client (used to issue certificates from Let's Encrypt / Google Public CA / private ACME CAs) connec

历史摘要 · 未重新核验 · GitHub Advisory

devpi-server may leak database contents

CVE-2026-54723

### Impact If the replication protocol is enabled by using the ``primary`` (or deprecated ``master``) role for a server

历史摘要 · 未重新核验 · GitHub Advisory

MONAI: Unsafe deserialization in NumpyReader allows arbitrary code execution via malicious .npy files

### Summary The `NumpyReader` class in `monai/data/image_reader.py` unconditionally uses `np.load(name, allow_pickle=Tr

历史摘要 · 未重新核验 · GitHub Advisory

MONAI vulnerable to OS command injection

### Comment from JPCERT/CC We are submitting the report again as we have yet to receive any responses from you after sub

历史摘要 · 未重新核验 · GitHub Advisory

Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch

## Summary GHSA-89gg-p5r5-q6r4 claims the pickle deserialization vulnerability in `algo_from_pickle()` was fixed in

历史摘要 · 未重新核验 · GitHub Advisory

surfio has an out-of-bounds read

CVE-2026-55211

### Impact Prior to version 0.0.19, surfio would not correctly validate size fields in irap files, leading to a buffer o

历史摘要 · 未重新核验 · GitHub Advisory

resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read

CVE-2026-55209

### Impact Prior to version 6.2.9 resdata would not correctly validate input in GRDECL files. The severity rating assume

历史摘要 · 未重新核验 · GitHub Advisory

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

CVE-2026-64849

### Summary The default MLflow Tracking Server (`mlflow server`, no authentication, default SQLite backend) exposes the

历史摘要 · 未重新核验 · GitHub Advisory

atomic-agents-stack: Parallel helper/delegate batch reserves $0 for models absent from the pricing table, bypassing the cost-cap fan-out guard

`_estimate_batch_cost` (`atomic_agents/agent.py`) looks up the per-model output price with `PRICING.get(model, {})`, ret

历史摘要 · 未重新核验 · GitHub Advisory

atomic-agents-stack: HTTP MCP catalog accepts cleartext http and spawns catalog-supplied commands (MITM to RCE)

The HTTP MCP server-registry backend factory (`atomic_agents/mcp_registry/http.py`, `make_http_mcp_server_registry_backe

历史摘要 · 未重新核验 · GitHub Advisory

sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)

CVE-2026-59893

### Summary sqlparse contains a Regular Expression Denial of Service (ReDoS) vulnerability in its dollar-quoted SQL lit

历史摘要 · 未重新核验 · GitHub Advisory

sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger

CVE-2026-54284

### Summary `sqlparse` ships hard limits (`MAX_GROUPING_DEPTH=100`, `MAX_GROUPING_TOKENS=10000`) intended to bound pars

历史摘要 · 未重新核验 · GitHub Advisory

sqlparse: Quadratic O(n²) DoS in group_comments

CVE-2026-71491

### Summary A comment-only statement (`-- c\n`*n) may cause a Denial of Service (DoS). ### Details Location: [sqlparse/

历史摘要 · 未重新核验 · GitHub Advisory

Glances: as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/config

CVE-2026-68520

## Summary Glances provides `as_dict_secure()` explicitly designed for unauthenticated API access, with a docstring sta

历史摘要 · 未重新核验 · GitHub Advisory

Glances: `--disable-config-exec` does not cover on-alert action commands (incomplete fix of CVE-2026-53925)

CVE-2026-68519

## Summary In Glances 4.5.5 the `--disable-config-exec` flag was extended (GHSA-3vwc-qwhc-3mj7) to stop `secure_popen()`

历史摘要 · 未重新核验 · GitHub Advisory