zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion

CVE-2026-47183

### Impact `DNSIncoming._log_exception_debug` and the four `QuietLogger` exception-dedup methods stored an unbounded `_s

历史摘要 · 未重新核验 · GitHub Advisory

zeroconf has unbounded recursion in DNS compression-pointer decoder that allows LAN-local denial of service

CVE-2026-47180

### Impact `DNSIncoming._decode_labels_at_offset` recurses once per DNS-name compression pointer (RFC 1035 §4.1.4). Poi

历史摘要 · 未重新核验 · GitHub Advisory

amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection

CVE-2026-8838

### Summary amazon-redshift-python-driver is the official Python connector for Amazon Redshift. In versions 2.1.13 and e

历史摘要 · 未重新核验 · GitHub Advisory

uv is vulnerable to arbitrary file write through entry point names

### Impact In versions of uv prior to 0.11.15, when installing a distribution containing an entry point specification (

历史摘要 · 未重新核验 · GitHub Advisory

compliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path Traversal

CVE-2026-45725

## Summary The compliance-trestle library's remote fetching cache mechanism (HTTPSFetcher and SFTPFetcher) constructs t

历史摘要 · 未重新核验 · GitHub Advisory

AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username

CVE-2026-45309

## Summary AsyncSSH 2.22.0 expands the OpenSSH-compatible `AuthorizedKeysFile` `%u` token with the raw SSH username duri

历史摘要 · 未重新核验 · GitHub Advisory

Langroid has Prompt to SQL Injection, Leading to RCE

CVE-2026-25879

# Security Vulnerability Report: Prompt to SQL Injection leading to RCE in latest Langroid ## Affected Scope langroid @

历史摘要 · 未重新核验 · GitHub Advisory

instagrapi: Unsafe signup challenge path handling in instagrapi

instagrapi 是一个用于与 Instagram API 交互的 Python 库，其版本 2.6.9 之前存在不安全的路径处理漏洞。在 signup（注册）挑战流程中，服务器返回的 challenge 路径被直接用于构建后续请求 U

历史摘要 · 未重新核验 · GitHub Advisory

aiograpi: Unsafe signup challenge path handling

CVE-2026-47157

aiograpi 是一个用于与 Instagram API 交互的 Python 库，支持注册、登录等操作。在版本 0.9.10 之前，该库在处理注册挑战（signup challenge）时存在路径处理漏洞。攻击者可以通过篡改服务器返回的

历史摘要 · 未重新核验 · GitHub Advisory

Flask-Security-Too OAuth reauthentication freshness bypass via cross- user OAuth identity acceptance

CVE-2026-46715

### Summary Flask-Security-Too 5.8.0's OAuth reauthentication flow can mark a session as fresh after verifying an O

历史摘要 · 未重新核验 · GitHub Advisory

aiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handler

# Vulnerability Description In `aiosend/webhook/base.py`, the `WebhookHandler.feed_update()` method performs full deser

历史摘要 · 未重新核验 · GitHub Advisory

Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host

CVE-2026-46703

#### Summary Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and run OCI

历史摘要 · 未重新核验 · GitHub Advisory

BoxLite: Permission Bypass Allows Modification of Read-Only Files

CVE-2026-46695

#### Summary Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch O

历史摘要 · 未重新核验 · GitHub Advisory

Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)

CVE-2026-46678

## Summary When an application using Pydantic AI opts a URL into `force_download='allow-local'` (which disables the def

历史摘要 · 未重新核验 · GitHub Advisory

SQLAdmin: Authorization Bypass on `ajax_lookup`

CVE-2026-46645

### Impact The `ajax_lookup` endpoint in `application.py` bypasses the `is_accessible()` access control check that all

历史摘要 · 未重新核验 · GitHub Advisory

FlaskBB: SSRF in get_image_info() via unrestricted avatar URL

CVE-2026-46556

###Summary A Server-Side Request Forgery (SSRF) vulnerability in get_image_info() allows any authenticated user to force

历史摘要 · 未重新核验 · GitHub Advisory

wger: cross-tenant account deletion / deactivation / activation by gym.manage_gym + gym=None

## Summary GHSA-mhc8-p3jx-84mm (CVE-2026-43948) reported that wger's `reset_user_password` and `gym_permissions_user_ed

历史摘要 · 未重新核验 · GitHub Advisory

Diffusers: TOCTOU Trust Remote Code Bypass

CVE-2026-45804

## Background This vulnerability is found in the `diffusers` package - the `transformers`-equivalent library for diffus

历史摘要 · 未重新核验 · GitHub Advisory

SQLFluff: Uncontrolled Resource Consumption in SQLFluff Parser

CVE-2026-46374

### Impact In deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a ma

历史摘要 · 未重新核验 · GitHub Advisory

SQLFluff: Recursive Stack Overflow in Parser

CVE-2026-46373

### Impact In deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a ma

历史摘要 · 未重新核验 · GitHub Advisory