PDM: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing

CVE-2026-47781

## Summary PDM automatically loads project-local plugin paths from `.pdm-plugins` during `Core` initialization. Because

历史摘要 · 未重新核验 · GitHub Advisory

Dulwich has unbounded memory allocation in receive-pack from crafted thin packs

CVE-2026-47734

## Impact An uncontrolled-resource-consumption (memory exhaustion) denial-of-service vulnerability (CWE-400 / CWE-789).

历史摘要 · 未重新核验 · GitHub Advisory

Dulwich doesn't sanitize commit subjects in `porcelain.format_patch`

CVE-2026-47712

### Impact dulwich.porcelain.format_patch(outdir=...) derives each patch filename from the commit's subject line. Prior

历史摘要 · 未重新核验 · GitHub Advisory

Bugsink: DOS using large numbers of event tags

### Summary In affected versions, Bugsink stores every tag supplied with an incoming event. An event with an unusually

历史摘要 · 未重新核验 · GitHub Advisory

Bugsink: Project scoping missing in sourcemap and debug-file lookup

CVE-2026-47728

### Summary Bugsink before 2.2.0 resolved sourcemaps and debug files by debug ID without scoping that lookup to the pro

历史摘要 · 未重新核验 · GitHub Advisory

Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known

CVE-2026-47716

### Description Bugsink’s issue list supports bulk actions such as resolving or muting selected issues. In affected vers

历史摘要 · 未重新核验 · GitHub Advisory

Bugsink: Issue event views can show an event from another project if its UUID is known

CVE-2026-47715

### Description Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look

历史摘要 · 未重新核验 · GitHub Advisory

NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)

CVE-2026-47731

## 1. Summary The Binary Stream Capture (BSC) component exposes an unauthenticated HTTP API for dynamically creating pa

历史摘要 · 未重新核验 · GitHub Advisory

Improper Access Control in vantage6 node

### Impact Malicious algorithms can potentially access other algorithms input and output files. ### Patches Todo ### W

历史摘要 · 未重新核验 · GitHub Advisory

Vantage6: Set admin user and password from environment or configuration

### Impact Vantage6 currently provides an initial user with username `root` and password `root`. This is not ideal for t

历史摘要 · 未重新核验 · GitHub Advisory

praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDOR

CVE-2026-47419

## Summary **Type:** Insecure Direct Object Reference. The agent CRUD endpoints (`GET / PATCH / DELETE /workspaces/{wor

历史摘要 · 未重新核验 · GitHub Advisory

Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering

CVE-2026-44182

### Summary The environment variables used during the rendering of the Kubernetes manifest allow YAML injection, enabli

历史摘要 · 未重新核验 · GitHub Advisory

Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution

CVE-2026-44181

### Summary The environment variables (`KERNEL_XXX`) used during the rendering of the Kubernetes manifest are vulnerabl

历史摘要 · 未重新核验 · GitHub Advisory

AIOHTTP is vulnerable to cross-origin redirect with per-request cookies

CVE-2026-47265

### Summary Cookies set with the `cookies` parameter on requests are sent after following a cross-origin redirect. ###

历史摘要 · 未重新核验 · GitHub Advisory

Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids Bypass

CVE-2026-44180

### Summary Jupyter Enterprise Gateway has a prohibited UID and GID feature that by default prevents launching kernels

历史摘要 · 未重新核验 · GitHub Advisory

Docling Core: Unsafe remote filename resolution

CVE-2026-44023

### Impact In versions `>= 1.5.0, = 2.74.1` ### Workarounds If upgrading is not immediately possible, avoid passing unt

历史摘要 · 未重新核验 · GitHub Advisory

Docling Core: Insufficient validation of image reference URIs

CVE-2026-44019

### Impact In versions `>= 2.5.0, = 2.74.1` ### Workarounds If upgrading is not immediately possible: - reject `file:`

历史摘要 · 未重新核验 · GitHub Advisory

Docling: Unsafe URI and Path Handling in HTML Backend

CVE-2026-47214

### Impact The HTML backend did not perform sufficient validation during resource handling: - Accepted `file://` URIs en

历史摘要 · 未重新核验 · GitHub Advisory

Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands

CVE-2026-44022

### Impact The LaTeX backend's handling of `\includegraphics`, `\input`, and `\include` commands lacked path containment

历史摘要 · 未重新核验 · GitHub Advisory

Docling: Unsafe XML Entity Expansion in USPTO Patent Backend

CVE-2026-44020

### Impact The USPTO patent XML parser used the standard `xml.sax.parseString()` without protection against XML External

历史摘要 · 未重新核验 · GitHub Advisory