Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path
CVE-2026-46338
# Summary `pymdownx.snippets` has a regression of the CVE-2023-32309 / GHSA-jh85-wwv9-24hv fix. With `restrict_base_pat
#pip
共收录 834 条相关情报。
← 返回所有主题NiceGUI: Unauthenticated log-volume denial of service in dynamic resource routes
CVE-2026-45554
### Summary Two FastAPI routes that serve per-component static assets in NiceGUI accept a sub-path parameter that may r
NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()
CVE-2026-45553
### Summary `ui.restructured_text()` renders reStructuredText server-side with Docutils without disabling file insertio
Malicious dropper in mistralai 2.4.6 PyPI package
The `mistralai` PyPI package version `2.4.6` contains a malicious dropper that executes on import on Linux. No `v2.4.6`
CloakBrowser: Unauthenticated path traversal via fingerprint parameter in cloakserve leads to arbitrary directory deletion
CVE-2026-45727
The `cloakserve` CDP multiplexer uses the user-supplied `fingerprint` query parameter directly as a filesystem path comp
eduMFA Passkeys: missing expiration flag may allow replay attacks and reuse of old challenges
### Impact In eduMFA = 2.9.1 by adding validity information to the userless challenges. ### Workarounds No known workar
eduMFA: Incorrect InnoDB snapshot isolation possibly allows token reusage
### Impact For deployments using MySQL or MariaDB = 11.6.2 the default is ON, which is not affected - Same rules applie
eduMFA: Unauthenticated Failcounter Increment on Resolver Tokens via /validate/check
### Impact If the resolver parameter is passed, but the user does not exist, all failcounters of tokens in that resolver
Graphite Has a Pickle Deserialization Vulnerability
### Impact **Type of vulnerability:** Insecure Deserialization via Python's `pickle` module. **Who is impacted:** Use
Microsoft APM: Symlinks under `.apm/prompts/` and `.apm/agents/` are dereferenced during `apm install`, copying host-local file contents into the project tree
CVE-2026-45539
## Summary Two primitive integrators in `apm-cli` enumerate package files with bare `Path.glob()` / `Path.rglob()` call
Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install`
CVE-2026-46383
### Summary Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle probe us
Weblate: Stored HTML injection in editor search preview
CVE-2026-45106
### Impact Weblate's live search preview renders unit `source` and `context` as HTML without escaping. Any contributor w
Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator
CVE-2026-44716
## Summary A path traversal vulnerability exists in Pipecat's development runner (`src/pipecat/runner/run.py`). When th
python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection
CVE-2026-45370
## Summary `_prepare_environment()` in `cli_communication_protocol.py` passes a full copy of `os.environ` to every CLI
utcp-cli Vulnerable to Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol
CVE-2026-45369
## Summary The `_substitute_utcp_args` method in `cli_communication_protocol.py` inserts user-controlled `tool_args` va
Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts
CVE-2026-45675
## Summary The LDAP and OAuth authentication flows use a TOCTOU (Time-of-Check-Time-of-Use) pattern for first-user admi
Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed
CVE-2026-45672
### Summary The `/api/v1/utils/code/execute` endpoint executes arbitrary Python code via Jupyter for any verified user,
Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion
CVE-2026-45671
### Summary Any authenticated user can permanently delete files owned by other users via `DELETE /api/v1/files/{id}` wh
Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)
CVE-2026-45667
### Summary GET `/api/v1/memories/ef` is accessible without authentication and executes `request.app.state.EMBEDDING_FUN
Open WebUI has an Indirect Object Reference (IDOR) in user notes
CVE-2026-45666
### Summary The API /api/v1/notes/{note_id} endpoint lacks proper authorization checks, allowing authenticated users to