No description provided
CVE-2026-79876
No description provided
#severity:critical
共收录 1449 条相关情报。
← 返回所有主题No description provided
CVE-2026-79869
No description provided
No description provided
CVE-2026-79871
No description provided
No description provided
CVE-2026-79868
No description provided
No description provided
CVE-2026-79873
No description provided
No description provided
CVE-2026-79872
No description provided
No description provided
CVE-2026-79870
No description provided
No description provided
CVE-2026-79875
No description provided
No description provided
CVE-2026-79863
No description provided
No description provided
CVE-2026-79864
No description provided
No description provided
CVE-2026-79855
No description provided
No description provided
CVE-2026-79865
No description provided
No description provided
CVE-2026-79851
No description provided
No description provided
CVE-2026-79866
No description provided
No description provided
CVE-2026-79860
No description provided
No description provided
CVE-2026-79861
No description provided
No description provided
CVE-2026-79859
No description provided
No description provided
CVE-2026-79862
No description provided
Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays
## Impact A vulnerability in applications using App router with Cache Component can lead to remote code execution. The
DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes
## Summary When DOMPurify is configured with `SAFE_FOR_TEMPLATES: true` together with a DOM-returning mode (`RETURN_DOM