LiteLLM: Authentication Bypass via Host Header Injection

CVE-2026-49468

### Impact A Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated acce

历史摘要 · 未重新核验 · GitHub Advisory

yt-dlp: Arbitrary command injection possible if --exec option used with yt-dlp

### Summary yt-dlp's `--exec` option is vulnerable to arbitrary command injection when handling untrusted metadata if th

历史摘要 · 未重新核验 · GitHub Advisory

yt-dlp: Arbitrary code execution via manifest downloads with aria2c

CVE-2026-50574

### Summary If aria2c is used as an external downloader for a fragmented manifest format (such as an HLS/DASH stream), y

历史摘要 · 未重新核验 · GitHub Advisory

Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS

CVE-2026-54283

### Summary `request.form()` accepts `max_fields` and `max_part_size` to bound resource consumption while parsing form d

历史摘要 · 未重新核验 · GitHub Advisory

Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname

CVE-2026-54282

### Summary In affected versions, the HTTP request path is not validated before being used to reconstruct `request.url`

历史摘要 · 未重新核验 · GitHub Advisory

Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse

# CurlAsyncHTTPClient leaks per-request credentials on handle reuse ## Summary `CurlAsyncHTTPClient` pools and reuses

历史摘要 · 未重新核验 · GitHub Advisory

python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service

CVE-2026-53539

### Summary When parsing `application/x-www-form-urlencoded` bodies, `QuerystringParser` located the field separator wi

历史摘要 · 未重新核验 · GitHub Advisory

python-multipart: Negative Content-Length in parse_form buffers the entire body in memory

CVE-2026-53540

### Summary `parse_form()` did not validate the `Content-Length` header before using it to bound its chunked read of th

历史摘要 · 未重新核验 · GitHub Advisory

python-multipart: Semicolon treated as querystring field separator enables parameter smuggling

CVE-2026-53538

### Summary `QuerystringParser` treated `;` as a field separator in `application/x-www-form-urlencoded` bodies, in addi

历史摘要 · 未重新核验 · GitHub Advisory

python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters

CVE-2026-53537

### Summary `parse_options_header` parsed `Content-Disposition` (and `Content-Type`) headers with [`email.message.Messa

历史摘要 · 未重新核验 · GitHub Advisory

Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient

CVE-2026-49853

## Summary When SimpleAsyncHTTPClient follows a 3xx redirect, it shallow-copies the original HTTPRequest, rewrites the

历史摘要 · 未重新核验 · GitHub Advisory

tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)

CVE-2026-49855

Tornado's gzip decompression routines work in limited-size chunks, but have no overall limit for the total size of decom

历史摘要 · 未重新核验 · GitHub Advisory

Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows

CVE-2026-48818

### Summary When serving static files on Windows, `StaticFiles` resolves the requested path with [`os.path.realpath`](h

历史摘要 · 未重新核验 · GitHub Advisory

Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`

CVE-2026-48817

### Summary When dispatching a request, `HTTPEndpoint` selects the handler by lowercasing the HTTP method and looking i

历史摘要 · 未重新核验 · GitHub Advisory

Vulnerable OpenSSL included in cryptography wheels

pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in wheels prior

历史摘要 · 未重新核验 · GitHub Advisory

aiohttp: Incomplete websocket frame payloads bypass memory limits

CVE-2026-54274

### Summary If an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size

历史摘要 · 未重新核验 · GitHub Advisory

WsgiDAV encoded dot segments can escape filesystem share roots

CVE-2026-48099

### Impact WsgiDAV 4.3.3 can allow a WebDAV request path containing an encoded parent-directory segment to escape the co

历史摘要 · 未重新核验 · GitHub Advisory

Kolibri has Unauthenticated Server-Side Request Forgery (SSRF) in RemoteFacilityUserViewset

CVE-2026-48053

## Summary Several Kolibri API endpoints accept an unvalidated `baseurl` parameter and fetch attacker-controlled URLs f

历史摘要 · 未重新核验 · GitHub Advisory

python-zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood

CVE-2026-48045

### Impact `AsyncListener.handle_query_or_defer` retained every truncated (TC-bit) incoming query in `self._deferred[ad

历史摘要 · 未重新核验 · GitHub Advisory

Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token

CVE-2026-48039

# Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token | Field | Value | | -------------

历史摘要 · 未重新核验 · GitHub Advisory