NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak

CVE-2026-49464

## Impact In versions from 1.5.0 up to and including 3.0.0, any authenticated portal user could complete and tamper wit

历史摘要 · 未重新核验 · GitHub Advisory

DSpace has possible Remote Code Execution (RCE) through Velocity Templates used by LDN

CVE-2026-49832

## Overview Remote Code Execution (RCE) is possible via Velocity Templates used by DSpace for [COAR Notify/LDN messages

历史摘要 · 未重新核验 · GitHub Advisory

Skipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding — chunked / HTTP/2 requests

CVE-2026-50197

### Summary `zalando/skipper`'s OpenPolicyAgent integration silently bypasses request-body inspection on HTTP/1.1 `Tran

历史摘要 · 未重新核验 · GitHub Advisory

`lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes

CVE-2026-49825

# `lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes (`xlink:href`) **Reporter:

历史摘要 · 未重新核验 · GitHub Advisory

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a...

CVE-2026-60002

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This

历史摘要 · 未重新核验 · GitHub Advisory

Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning...

CVE-2026-59704

Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metada

历史摘要 · 未重新核验 · GitHub Advisory

The application contains an out-of-bounds write vulnerability that can be exploited by an...

CVE-2026-42953

The application contains an out-of-bounds write vulnerability that can be exploited by an attacker to cause the program

历史摘要 · 未重新核验 · GitHub Advisory

The application contains a stack-based buffer overflow vulnerability that can be exploited by an...

CVE-2026-49033

The application contains a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arb

历史摘要 · 未重新核验 · GitHub Advisory

The application contains a use-after-free vulnerability that can be exploited to cause memory...

CVE-2026-42958

The application contains a use-after-free vulnerability that can be exploited to cause memory corruption while parsing s

历史摘要 · 未重新核验 · GitHub Advisory

Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise

CVE-2026-53553

> [ Click here to jump to the Simplified Chinese version (点击跳转到简体中文版本)](#goploy-系统任意文件读取) # Goploy System Arbitrary File

历史摘要 · 未重新核验 · GitHub Advisory

ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)

CVE-2026-53530

### Summary The public parser entrypoint `ratex_parser::parse(&str)` panics on the **9-byte** input `\verbéxé` (i.e. `\

历史摘要 · 未重新核验 · GitHub Advisory

FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2...

CVE-2026-58583

FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 allows local privilege esc

历史摘要 · 未重新核验 · GitHub Advisory

GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability...

CVE-2026-58469

GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_s

历史摘要 · 未重新核验 · GitHub Advisory

The GET /api/v1/public/:accessId/portfolio endpoint in ghostfolio accepts private access IDs...

CVE-2026-59708

The GET /api/v1/public/:accessId/portfolio endpoint in ghostfolio accepts private access IDs without validating granteeU

历史摘要 · 未重新核验 · GitHub Advisory

HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect...

CVE-2026-7017

HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server

历史摘要 · 未重新核验 · GitHub Advisory

@better-auth/scim: Account/provider takeover via missing owner binding on non-org SCIM providers

### Am I affected? Users are affected if all of these hold: - They install and register the `@better-auth/scim` plugin

历史摘要 · 未重新核验 · GitHub Advisory

@better-auth/oauth-provider's OAuth authorization-code grant allows concurrent redemption when two token requests race the find-then-delete primitive

CVE-2026-53518

### Am I affected? Users are affected if all of the following are true: - Their project depends on `@better-auth/oauth

历史摘要 · 未重新核验 · GitHub Advisory

Better Auth: OAuth refresh-token rotation forks the token family on concurrent redemption

CVE-2026-53517

### Am I affected? Users are affected if all of the following are true: - Their project depends on `@better-auth/oauth

历史摘要 · 未重新核验 · GitHub Advisory

Better Auth has insecure cryptographic defaults in oidcProvider: alg=none advertised and plain PKCE accepted by default

### Am I affected? Users are affected if all of the following are true: - Their application uses `better-auth` at a ve

历史摘要 · 未重新核验 · GitHub Advisory

Better Auth has stored XSS in the auth-server origin via javascript: redirect_uri in oidc-provider and mcp

### Am I affected? Check each condition. Users are affected when all of the first three hold. - Their application enab

历史摘要 · 未重新核验 · GitHub Advisory