Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode

CVE-2026-54628

## Summary Anyquery's `server` mode does not restrict outbound HTTP requests initiated by its built-in SQLite virtual ta

历史摘要 · 未重新核验 · GitHub Advisory

Ech0: ParseAcceptLanguage `_` separator bypass enables ~70x CPU amplification via Accept-Language header in i18n.Middleware

### Summary Ech0's i18n middleware runs on every HTTP request and constructs a fresh `*goi18n.Localizer` from the raw `

历史摘要 · 未重新核验 · GitHub Advisory

Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser

CVE-2026-54448

## Summary When Trivy scans a Helm chart archive (`.tgz`), its custom tar unpacker reads each entry with `io.ReadAll(tr

历史摘要 · 未重新核验 · GitHub Advisory

EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField

CVE-2026-54087

EasyAdmin's `FileField` and `ImageField` accept browser-executable file types by default (`FileField` applies no MIME/ex

历史摘要 · 未重新核验 · GitHub Advisory

TsDProxy: X-Forwarded-For header injection allows IP spoofing in proxied requests to backend services

## Description The HTTP reverse proxy handler in tsdproxy does not strip the X-Forwarded-For (or X-Real-IP) header from

历史摘要 · 未重新核验 · GitHub Advisory

yutu: Arbitrary File Write via MCP `caption-download` Tool

CVE-2026-50158

## Arbitrary File Write via MCP `caption-download` Tool ### Summary The `caption-download` MCP tool in yutu passes the

历史摘要 · 未重新核验 · GitHub Advisory

Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation

CVE-2026-50141

### Impact A vulnerability in Woodpecker CI's gRPC layer allowed any authenticated agent to impersonate any other agent

历史摘要 · 未重新核验 · GitHub Advisory

Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges

CVE-2026-50131

### Summary Fedify previously addressed SSRF/internal network access in GHSA-p9cg-vqcc-grcx by adding public URL valida

历史摘要 · 未重新核验 · GitHub Advisory

MKP: Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory Exhaustion

CVE-2026-50125

## Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory Exhaustion ### Summary The MK

历史摘要 · 未重新核验 · GitHub Advisory

Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode

CVE-2026-50013

### Summary: When Hoverfly is running in Diff mode, the `AddDiff()` function writes to the shared `responsesDiff` map w

历史摘要 · 未重新核验 · GitHub Advisory

SAP Change and Transport System Attach Tool (ctsattach) allows an authenticated attacker to...

CVE-2026-58233

SAP Change and Transport System Attach Tool (ctsattach) allows an authenticated attacker to supply a specially crafted a

历史摘要 · 未重新核验 · GitHub Advisory

SAP NetWeaver Application Server Java allows an unauthenticated attacker to inject malicious...

CVE-2026-44752

SAP NetWeaver Application Server Java allows an unauthenticated attacker to inject malicious JavaScript through crafted

历史摘要 · 未重新核验 · GitHub Advisory

SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow...

CVE-2026-44745

SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurati

历史摘要 · 未重新核验 · GitHub Advisory

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files...

CVE-2026-0487

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location

历史摘要 · 未重新核验 · GitHub Advisory

Kimai: Pre-2FA KIMAI_SESSION cookie grants full authenticated REST API access, bypassing TOTP

CVE-2026-52827

### Summary Two-factor authentication (TOTP) can be fully bypassed for the REST API. The `KIMAI_SESSION` cookie returned

历史摘要 · 未重新核验 · GitHub Advisory

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system...

CVE-2026-57856

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() meth

历史摘要 · 未重新核验 · GitHub Advisory

9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability...

CVE-2026-62328

9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability that allows remote attack

历史摘要 · 未重新核验 · GitHub Advisory

CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url...

CVE-2026-62240

CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one

历史摘要 · 未重新核验 · GitHub Advisory

Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that...

CVE-2026-62242

Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated a

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in...

CVE-2026-62194

OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in plugin install commands that

历史摘要 · 未重新核验 · GitHub Advisory