Prompty: Arbitrary file read via file reference expansion
CVE-2026-53598
## Summary Prompty loaders expanded `${file:...}` references in `.prompty` frontmatter without enforcing that the resolv
#pip
共收录 834 条相关情报。
← 返回所有主题meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token
CVE-2026-54547
## X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token ### Summary `AuthInjectionMiddleware` in `meta-ads-
meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch
CVE-2026-54549
## Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch ### Summary The `upload_
sh _uid does not drop supplementary groups (incomplete privilege drop)
CVE-2026-54552
### Impact The `_uid` option performed an incomplete privilege drop on Linux/Unix-like systems. When `sh` was run from
plone.restapi: Stored XSS by spoofing mime type
### Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whene
plone.app.textfield: Stored XSS by spoofing mime type
CVE-2026-54503
### Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whene
vLLM: Speech-to-text upload size limit is enforced after full UploadFile read
CVE-2026-55646
## Summary Current-head vLLM documents `VLLM_MAX_AUDIO_CLIP_FILESIZE_MB` as the maximum audio file size accepted by the
vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends
CVE-2026-55574
## Summary The `structured_outputs.regex` API parameter passes a user-supplied regex string directly to grammar compile
vLLM has Remote DoS via Invalid Recovered Token Reinjection
CVE-2026-54234
## Summary A frontend-legal multi-request speculative workload can make vLLM produce an out-of-vocabulary recovered tok
vLLM: Processing differential in multi-channel audio downmixing enables hidden-input/moderation bypass for audio models
CVE-2026-34760
## Issue Description Librosa defaults to using `numpy.mean` for mono downmixing (`to_mono`), while the international sta
MCP Python SDK: WebSocket server transport does not support Host/Origin validation
CVE-2026-59950
### Summary In affected versions, the deprecated WebSocket server transport (`mcp.server.websocket.websocket_server`) ac
MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal
CVE-2026-52869
### Summary In affected versions, the SSE and Streamable HTTP server transports routed incoming requests to an existing
MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks
CVE-2026-52870
### Summary In affected versions, the default request handlers installed by the experimental tasks feature (`server.expe
dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS
CVE-2026-50271
### Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without
django-haystack: Remote Code Execution via `eval()` in Elasticsearch Result Deserialization
## Remote Code Execution via `eval()` in Elasticsearch Result Deserialization ### Summary The Elasticsearch backend in
Pixeldrain API key shared with unverified thirdparty sites
CVE-2026-54254
### Summary When processing Pixeldrain URLs, `cyberdrop-dl-patched` could send an `Authorization` header that includes
TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint
CVE-2026-54457
### Impact The `/internal/object_storage` endpoint accepts a caller-supplied JSON `storage_path` parameter that dynamic
FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data
CVE-2026-53656
### Impact The FiftyOne App/API server (`fiftyone/server/app.py`) and the `/media` route (`fiftyone/server/routes/media
LangBot: Authenticated RCE Via MCP Configuration
CVE-2026-54449
### Summary Any authenticated user can achieve arbitrary command execution on the LangBot servers through changing the M
garminconnect Has Insecure Permission Assignment for Garmin OAuth Token Store
CVE-2026-54447
## Insecure Permission Assignment for Garmin OAuth Token Store ### Summary `garminconnect` (≤ 0.3.4) wrote its OAuth t