etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline

### Impact _What kind of vulnerability is it? Who is impacted?_ A network attacker who can reach an etcd TLS listener c

历史摘要 · 未重新核验 · GitHub Advisory

AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()

CVE-2026-16796

### Summary The AWS Bedrock AgentCore Python SDK (bedrock-agentcore) provides tools for building AI agents, including a

历史摘要 · 未重新核验 · GitHub Advisory

etcd: Watch API authorization bypass via open-ended range requests

### Impact _What kind of vulnerability is it? Who is impacted?_ A user granted READ permission on a single, exact key c

历史摘要 · 未重新核验 · GitHub Advisory

Smithy-RS: Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

CVE-2026-16756

## Summary Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy

历史摘要 · 未重新核验 · GitHub Advisory

libp2p: yamux connection DoS via oversized data frame

### Summary The yamux stream multiplexer in py-libp2p does not validate incoming DATA frame lengths against the receive

历史摘要 · 未重新核验 · GitHub Advisory

Oh My Posh: Arbitrary command execution via template injection in the path segment

### Summary Oh My Posh re-renders the resolved path string, which contains the raw folder names taken from the filesyste

历史摘要 · 未重新核验 · GitHub Advisory

OmniFaces: Forged combined-resource IDs and related output/push boundaries

## 1. Forged combined-resource IDs `CombinedResourceInfo` accepts a path-derived ID without an authenticity check, infla

历史摘要 · 未重新核验 · GitHub Advisory

Shescape: Quadratic-time denial of service in the flag-protection

### Impact This impacts users of Shescape that have flag protection enabled, which is on by default, regardless of the

历史摘要 · 未重新核验 · GitHub Advisory

AWS API MCP Server Security Policy Bypass via Startup Initialization Failure

CVE-2026-16584

## Summary The AWS API MCP Server is an open source Model Context Protocol (MCP) server that enables AI assistants to in

历史摘要 · 未重新核验 · GitHub Advisory

OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal

### Summary The `/api/fs/batch_rename` handler validates and authorizes only the requested source directory. It rejects

历史摘要 · 未重新核验 · GitHub Advisory

blaze: Unbounded WebSocket message aggregation in http4s-blaze-server

## Summary `http4s-blaze-server` aggregates the fragments of an incoming WebSocket message with no limit on total size

历史摘要 · 未重新核验 · GitHub Advisory

blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass)

### Summary blaze-server can merge HTTP/1.1 chunked-body trailer fields into `Request.headers`. Because trailer fields

历史摘要 · 未重新核验 · GitHub Advisory

blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser

### Summary Five independent HTTP/1.1 conformance laxities in blaze's hand-written Java parser (`http/src/main/java/or

历史摘要 · 未重新核验 · GitHub Advisory

Poweradmin: OIDC `sub` collation bypass in Poweradmin leading to account takeover

## Preface Poweradmin maps OIDC identities into local users through `oidc_user_links.oidc_subject` plus `provider_id`.

历史摘要 · 未重新核验 · GitHub Advisory

Poweradmin: Broken access control (IDOR): any zone owner can modify DNS records in zones they do not own

## Affected software - Product: Poweradmin (web front-end for PowerDNS) - Version tested: master, commit 7f28c3a97 (als

历史摘要 · 未重新核验 · GitHub Advisory

Poweradmin: API user-update endpoint leads to a non-admin reset any user's password and take over the superuser account

### Summary The REST API user-update endpoint (`PUT/PATCH /api/v2/users/{id}` and the V1 equivalent) does not enforce t

历史摘要 · 未重新核验 · GitHub Advisory

brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash

CVE-2026-14257

### Summary `expand()` bounds the *number* of results it produces (the `max` option, `100_000` by default) but not thei

历史摘要 · 未重新核验 · GitHub Advisory

vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

### Impact Edit permission lacks ownership check, so another developer could alter metadata that is later trusted by nod

历史摘要 · 未重新核验 · GitHub Advisory

frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

## Summary An integer-overflow vulnerability in the frp server's optional SSH Tunnel Gateway lets any unauthenticated r

历史摘要 · 未重新核验 · GitHub Advisory

@anephenix/hub: Unauthenticated WebSocket RPC Waiter Resource Exhaustion

### Summary `@anephenix/hub` starts a `setInterval` polling loop for every incoming WebSocket connection to request a c

历史摘要 · 未重新核验 · GitHub Advisory