asyncssh has SCP Path Traversal to Arbitrary File Write
CVE-2026-54591
| | | |---|---| | Product | asyncssh (all versions through 2.23.0) | | Related | CVE-2019-6111 (same class in OpenSSH) |
#severity:high
共收录 5383 条相关情报。
← 返回所有主题SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed
CVE-2026-54606
Summary A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the SunEditor Embed plugin. Crafted iframe embed
Cloudreve WebDAV (`/dav`) has Path Traversal / Broken Access Control — scoped DAV credential escapes its configured account root
CVE-2026-54563
## Summary A Cloudreve WebDAV account stores a `uri` that defines the account's root folder. The WebDAV request handler
@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys
CVE-2026-54511
`@logtape/syslog` contains two related output-encoding bugs in the structured data formatting code. Both only affect dep
IzPack has Path Traversal in UnpackerBase that allows writing files outside the installation directory via malicious pack entries
CVE-2026-54550
### Summary IzPack's `UnpackerBase.unpack()` resolves pack-file target paths without any canonical-path or directory-co
http4s has HTTP/2 Denial of Service with Ember Backend
CVE-2026-54556
### Summary http4s 0.23.x and 1.0 servers running ember with http2 enabled are vulnerable to a denial of service attack
Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url`
CVE-2026-54356
### Summary Budibase 3.39.7 allows a low-privilege authenticated published-app user with the built-in BASIC role to obta
Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerability....
CVE-2026-41707
Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerability. The internal cache stor
A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack....
CVE-2026-80186
A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bl
In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms ...
CVE-2026-80184
In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms (OAuth1 access tokens, appl
In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application...
CVE-2026-80182
In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped au
icalendar has Algorithmic Complexity in Equality
CVE-2026-55099
### Summary `Component.__eq__` compares subcomponents in `O(2^n)` time relative to nesting depth. Because the parser ac
Chainlist has SSRF via MCP SSE and streamable-http transports that allows unauthenticated internal network access
CVE-2026-45019
### Am I affected? Only if your deployment sets `features.mcp.enabled = true` in `.chainlit/config.toml`. **MCP has bee
@arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key
CVE-2026-55604
# Cross-Session Data Exposure via Caller-Controlled `session_id` Project / Repository: `arikusi/deepseek-mcp-server`
consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write
CVE-2026-55609
### Impact An arbitrary file write vulnerability (CWE-73, External Control of File Name or Path) exists in the `consciou
Whistle vulnerable to path traversal
CVE-2026-55629
This bug was found by nova, which is an automated tool from group of Song Wu, intern, Zhejiang University; BoWang, indep
eml_parser vulnerable to DoS via deeply nested parens in Received headers
CVE-2026-55620
### Summary `eml_parser` strips parenthesised CFWS comments from `Received:` headers using a regex-based fix-point loop
gRPC Erlang package has unbounded gzip decompression (decompression bomb)
CVE-2026-53430
### Summary An unauthenticated remote peer can crash any gRPC server built on this library by sending a small gzip-compr
gRPC Erlang package has unbounded request body accumulation in `read_full_body/3`
CVE-2026-48854
### Summary `'Elixir.GRPC.Server.Adapters.Cowboy.Handler':read_full_body/3` accumulates every received chunk into a sin
gRPC Erlang package's path bindings are overridable by query string and request body
CVE-2026-48599
### Summary In the HTTP-to-gRPC transcoding layer of the `grpc` Hex package, query-string and request-body parameters c