共收录 5411 条相关情报。
← 返回所有主题CVE-2026-54719
GHSA-wvhv-qcqf-f3cx fixed the per-folder .goshs ACL bypass on the state-changing routes (PUT/POST upload/?mkdir/?delete)
CVE-2026-54654
### Summary `datamodel-code-generator` is vulnerable to code injection when a developer passes an `--extra-template-dat
CVE-2026-55389
### Summary `datamodel-code-generator` resolves JSON-Schema `$ref` targets that point at the local filesystem without r
CVE-2026-54653
### Summary `datamodel-code-generator` is vulnerable to code injection when generating Python models from an attacker-c
CVE-2026-55391
### Summary `datamodel-code-generator`'s anti-SSRF guard validates the resolved IP of a fetch target once and then lets
CVE-2026-54656
### Summary When the Pydantic v2 output mode is in use, `datamodel-code-generator` reads a `validators` array from each
CVE-2026-54690
### Summary JSON-Schema `$ref` values pointing at HTTP or HTTPS URLs are silently dereferenced by `datamodel-code-gener
CVE-2026-55415
#### Summary A malicious input schema (OpenAPI / JSON Schema) can execute arbitrary Python code on the machine that **i
CVE-2026-54621
### Summary `datamodel-code-generator` is vulnerable to code injection when generating Python models from an attacker-c
CVE-2026-54655
### Summary `datamodel-code-generator` honours a custom `x-python-type` JSON-Schema extension that lets a schema author
CVE-2026-13463
IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of creden
CVE-2026-15280
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a path-segm
CVE-2026-14893
IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core
CVE-2026-14981
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 a
CVE-2026-15325
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 i
CVE-2026-15328
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 i
CVE-2026-15064
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 i
CVE-2026-15057
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service due to uncontr
CVE-2026-14976
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code execution with the colle
CVE-2026-14528
IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information.