Thumbor treats ALLOWED_SOURCES string patterns as unescaped regex, allowing hostname bypass via wildcard dot
CVE-2026-53500
## Summary The `ALLOWED_SOURCES` configuration is meant to restrict which hosts Thumbor's HTTP loader may fetch images
#severity:high
共收录 5411 条相关情报。
← 返回所有主题LightFTP 2.3.1 contains a race condition vulnerability that allows remote attackers to crash the...
CVE-2026-67607
LightFTP 2.3.1 contains a race condition vulnerability that allows remote attackers to crash the server by racing a fres
A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven...
CVE-2026-18141
A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible (EDA). An unauthentic
The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched sixteen COMMENT ON /...
CVE-2026-17346
The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched sixteen COMMENT ON / pgstattuple / pgstatin
The MASTER_PASSWORD_HOOK setting, introduced in pgAdmin 4 7.2, lets an administrator configure an...
CVE-2026-17347
The MASTER_PASSWORD_HOOK setting, introduced in pgAdmin 4 7.2, lets an administrator configure an external command that
@phun-ky/defaults-deep Has a Prototype Pollution issue via Unsafe Recursive Property Merging
CVE-2026-54737
### Impact A prototype pollution vulnerability exists in @phun-ky/defaults-deep prior to version 2.0.5. The library re
hashi-vault-js has a path traversal and query parameter injection
CVE-2026-55100
## Summary The `hashi-vault-js` library is vulnerable to path traversal and query string injection due to the lack of p
dssrf: any users using 1.1.1.1 DNS is impacted by SSRF
CVE-2026-54729
## Summary is_url_safe can treat localhost as safe when DNS resolver 1.1.1.1 returns NXDOMAIN because dns.resolve4 yiel
Sylius Mollie Plugin vulnerable to payment status forgery via the payment webhook
CVE-2026-68500
### Impact The shop payment webhook `POST /{_locale}/update-payment` (route `sylius_mollie_shop_payment_webhook`) ac
Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)
CVE-2026-56819
### Summary A remote, unauthenticated peer can leak one direct `ByteBuf` per HTTP/2 `DATA` frame in applications that e
Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode
CVE-2026-12075
### Summary `nltk.pathsec` provides an SSRF filter that NLTK documents as a security control, blocking loopback, private
Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex
CVE-2026-12061
### Summary `ReviewsCorpusReader` extracts feature annotations of the form *label* followed by a bracketed signed digit
Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)
CVE-2026-12072
### Summary A path-traversal vulnerability in `NKJPCorpusReader` allows an attacker who can influence the `fileids
Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)
CVE-2026-12074
### Summary `FramenetCorpusReader.frame(name)` interpolates a caller-supplied frame name into an XML file path that is r
Spring Data: Unbounded property-path cache keyed by externally-supplied path string
CVE-2026-41695
`src/main/java/org/springframework/data/mapping/context/PersistentPropertyPathFactory.java:175` · Unbounded Resource All
Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service
CVE-2026-52856
### Summary A maliciously crafted packet received & parsed during the SFTP connection handshake will cause a Go panic.
`@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation
### Summary `@dynatrace-oss/dynatrace-mcp-server` v1.8.5 exposes an HTTP transport mode (`--http` flag) that performs n
Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in...
CVE-2026-16727
Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in ASUS Armoury Crate allows
A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs...
CVE-2026-18188
A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled
Improper neutralization of special elements used in an SQL command ('SQL injection')...
CVE-2026-15929
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics Sma