GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)
## Summary The fix for [GHSA-rwj8-pgh3-r573](https://github.com/gitpython-developers/GitPython/security/advisories/GHSA
#pip
共收录 834 条相关情报。
← 返回所有主题open-webui terminal proxy path traversal guard bypass via 9x encoded traversal
CVE-2026-59221
AI assistance was used to help inspect the code and prepare this report. ## Summary The fix for GHSA-r2wg-2mcr-66rv is
Open WebUI: Arena task endpoints can bypass underlying model access controls
CVE-2026-59225
## Summary An authenticated non-admin user with read access to an arena wrapper model can reach a restricted underlying
Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete
CVE-2026-59212
## Summary Current `main` and `v0.9.6` still allow an authenticated user to turn read-only access to another user's fil
Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)
CVE-2026-59224
## Summary The terminal proxy in `backend/open_webui/routers/terminals.py` forwards the Open WebUI user's identity to t
Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching
CVE-2026-59223
## Summary The administrator-configured `WEB_FETCH_FILTER_LIST` (the allow/block list applied to server-side web fetche
yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output
CVE-2026-55404
### Summary If the `--write-link`, `--write-url-link` or `--write-desktop-link` options are used with yt-dlp, it may pro
pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)
CVE-2026-59935
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsi
pypdf: Possible infinite loop for not terminated inline images
CVE-2026-59936
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsi
pypdf: Possible long runtimes for repeated malformed cross-reference entries
CVE-2026-59937
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-re
pypdf: Possible large memory usage for wrong image dimensions
CVE-2026-59938
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loa
JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)
JupyterLab 4.5+ allows notebook settings to be shared and applied through an `overrides.json` file using the `Import` bu
JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab
JupyterLab's image viewer allows for cross-site scripting (XSS) when a specially-crafted image file is opened through th
JupyterLab: PyPI extension blocklist package-name canonicalization bypass
JupyterLab's PyPI extension manager enforces `blocked_extensions_uris` by comparing the requested install name to blockl
JupyterLab PluginManager lock-rule enforcement bypass
JupyterLab's plugin manager exposes administrator controls intended to prevent users from enabling or disabling selected
JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)
The extension allowlist/blocklist check inside `PyPIExtensionManager.install()` was not enforced due to a missing await.
LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks
CVE-2026-59821
### Impact LiteLLM's Custom Code Guardrails production create/update paths did not apply the same sandboxing and valida
LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
CVE-2026-59822
### Impact LiteLLM's MCP Streamable HTTP endpoint could allow an unauthenticated attacker to establish an authenticated
LiteLLM: Local file read via request-supplied OIDC file references
CVE-2026-59819
### Impact LiteLLM's `/health/test_connection` endpoint resolved request-supplied environment and OIDC file references
LiteLLM: Arbitrary file write via path traversal in Skills archive extraction
CVE-2026-59820
### Impact LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives.