Glances: Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by nested stat values (process 'cmdline') → OS command injection

CVE-2026-62982

## Summary CVE-2026-32608 ("Command Injection via Process Names in Action Command Templates") was fixed (commit `5680a5d

历史摘要 · 未重新核验 · GitHub Advisory

ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)

CVE-2026-53708

## Summary The `/admin/gateways/test` endpoint validates submitted URLs by resolving the hostname at validation time an

历史摘要 · 未重新核验 · GitHub Advisory

nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences

CVE-2026-12243

# Summary nltk.data.load() and nltk.data.find() resolve user-supplied resource names to filesystem paths using url2pathn

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: Completion prompt lists fan out into unbounded engine requests

CVE-2026-73559

## Summary The `/v1/completions` request model accepts `prompt` as a list of text prompts or a list of token-id prompts

历史摘要 · 未重新核验 · GitHub Advisory

atomic-agents-stack: Dashboard HTTP server path traversal allows arbitrary file read

The optional dashboard HTTP server (`atomic_agents/dashboard/serve.py`) builds filesystem paths directly from the reques

历史摘要 · 未重新核验 · GitHub Advisory

Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials

CVE-2026-54249

### Summary A client that can submit message history to a Pydantic AI UI adapter can reference arbitrary files in the a

历史摘要 · 未重新核验 · GitHub Advisory

Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)

CVE-2026-55074

Through version 1.3.0, the jailexec connection plugin's put_file resolved a transfer's destination to a path on the jail

历史摘要 · 未重新核验 · GitHub Advisory

MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`

CVE-2026-55071

## Stata Command Injection via Unsanitized `package` in `ado_package_install` ### Summary The `ado_package_install` MC

历史摘要 · 未重新核验 · GitHub Advisory

compliance-trestle has an URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0

CVE-2026-52776

### Summary `compliance-trestle` 4.0.3 (latest) ships an `URLSecurityValidator` in `trestle/core/remote/security.py` to

历史摘要 · 未重新核验 · GitHub Advisory

tablib: Stored XSS in the HTML export via unescaped dataset title

CVE-2026-9318

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows

历史摘要 · 未重新核验 · GitHub Advisory

pypdf: Possible large memory usage for large /ToUnicode streams

CVE-2026-71870

### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requir

历史摘要 · 未重新核验 · GitHub Advisory

pypdf: Possible long runtimes/large memory usage for large CID font width ranges

CVE-2026-71852

### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consum

历史摘要 · 未重新核验 · GitHub Advisory

pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

CVE-2026-67422

### Summary Four inline processors in pymdown-extensions contain regular expressions with exponential backtracking. A s

历史摘要 · 未重新核验 · GitHub Advisory

GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution

## Summary The `check_unsafe_options` guard can be bypassed on every guarded method (clone/clone_from, fetch/pull/push,

历史摘要 · 未重新核验 · GitHub Advisory

GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE)

## Summary GitPython's config-name validator only neutralizes CR/LF/NUL for the `"option"` label; it does not reject `=`

历史摘要 · 未重新核验 · GitHub Advisory

GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython

### Summary GitPython computes the on-disk location of a submodule's separate Git directory (`.git/modules/`) from the s

历史摘要 · 未重新核验 · GitHub Advisory

GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()

## Summary `IndexFile.remove()` and `Head.checkout()` forward `**kwargs` into `git rm` and `git checkout` with no guard

历史摘要 · 未重新核验 · GitHub Advisory

GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks

## Summary `Repo.init()` forwards `**kwargs` verbatim to `git init` with no unsafe-option guard and no `allow_unsafe_opt

历史摘要 · 未重新核验 · GitHub Advisory

GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite

## Summary `IndexFile.from_tree`, `IndexFile.reset` (→ from_tree) and `IndexFile.merge_tree` append caller-influenced tr

历史摘要 · 未重新核验 · GitHub Advisory

h2: Duplicate Host header could facilitate request smuggling

CVE-2026-71554

### Impact h2 <=4.4.0 accepts request header blocks containing more than one Host header, and forwards every Host header

历史摘要 · 未重新核验 · GitHub Advisory