A vulnerability exists in H.View IP cameras that could allow an authenticated user to supply...

CVE-2026-55975

A vulnerability exists in H.View IP cameras that could allow an authenticated user to supply unsanitized XML fields to t

历史摘要 · 未重新核验 · GitHub Advisory

The DMP-5000 file service exposes authenticated arbitrary file upload functionality. There are...

CVE-2026-33560

The DMP-5000 file service exposes authenticated arbitrary file upload functionality. There are exposed endpoints which a

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow...

CVE-2026-56414

A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arb

历史摘要 · 未重新核验 · GitHub Advisory

pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config

## Summary `pnpm` accepts package names from the env lockfile `configDependencies` section and uses those names directl

历史摘要 · 未重新核验 · GitHub Advisory

pnpm: `patch-remove` could delete project-selected files outside the patches directory

## Summary The `patch-remove` deletion-scope issue tracked as GHSA-72r4-9c5j-mj57 / CAND-PNPM-030 has been addressed in

历史摘要 · 未重新核验 · GitHub Advisory

pnpm: Hoisted install imports lockfile alias outside node_modules

## Summary The hoisted dependency alias issue tracked as GHSA-fr4h-3cph-29xv / CAND-PNPM-059 has been addressed in both

历史摘要 · 未重新核验 · GitHub Advisory

pnpm: `stage download` writes outside its destination directory via manifest name/version traversal

CVE-2026-55700

## Summary The staged-tarball filename traversal reported as GHSA-v23m-ccfg-pq9h / CAND-PNPM-038 is fixed on `main` by

历史摘要 · 未重新核验 · GitHub Advisory

pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes

CVE-2026-55698

## Maintainer Action Plan This report is ready to review with the shared patch branch. Start with the PR and the expec

历史摘要 · 未重新核验 · GitHub Advisory

Subsonic API: any authenticated user can delete or read any other user's playlist (IDOR)

CVE-2026-49338

## Summary In gonic, the Subsonic API endpoints `/rest/deletePlaylist.view` and `/rest/getPlaylist.view` perform no per

历史摘要 · 未重新核验 · GitHub Advisory

gonic: Path Traversal in playlist `id` bypasses ownership check, enabling any user to read/delete other users' playlists

CVE-2026-49339

## Summary The maintainer's recent fix in [`6dd71e6a3c966867ef8c900d359a7df75789f410`](https://github.com/sentriz/gonic

历史摘要 · 未重新核验 · GitHub Advisory

gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host

CVE-2026-49340

## Summary A logic error in `ServeCreateOrUpdatePlaylist` allows **any authenticated Subsonic user** (including non-adm

历史摘要 · 未重新核验 · GitHub Advisory

pnpm: Repository-controlled configDependencies can select a pacquet native install engine

CVE-2026-55697

## Maintainer Action Plan This report is ready to review with the shared patch branch. Start with the PR and the expec

历史摘要 · 未重新核验 · GitHub Advisory

pnpm: Manifest identity spoof satisfies allowBuilds and runs attacker lifecycle

CVE-2026-55487

## Summary Keep build approval for opaque dependency sources byte-exact for GHSA-5wx6-mg75-v57r / CAND-PNPM-123. Merge

历史摘要 · 未重新核验 · GitHub Advisory

pnpm Vulnerable to Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)

CVE-2026-50015

## Summary pnpm's patch application pipeline (`@pnpm/patch-package`) performs no path validation on file paths extracte

历史摘要 · 未重新核验 · GitHub Advisory

pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement

CVE-2026-50016

## Summary pnpm allows a transitive dependency alias from registry package metadata to contain path traversal segments.

历史摘要 · 未重新核验 · GitHub Advisory

ex_aws_sns: Trusted-attacker `SigningCertURL` permits complete SNS signature bypass

### Summary `ExAws.SNS.verify_message/1` fetches the signing certificate from the `SigningCertURL` field of the incomin

历史摘要 · 未重新核验 · GitHub Advisory

Blnk has an API key authorization bypass in owner and scope enforcement

Blnk API key endpoints had an authorization issue that allowed non-master API keys to perform key-management actions out

历史摘要 · 未重新核验 · GitHub Advisory

js-toml vulnerable to CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals

CVE-2026-49293

## Summary `js-toml` versions up to and including **1.1.0** parse hexadecimal / octal / binary integer literals via a h

历史摘要 · 未重新核验 · GitHub Advisory

SolidInvoice: IDOR in LiveComponent allows same-company cross-user access to API tokens and notification transport settings

## Summary Four authorization bypass vulnerabilities in Symfony LiveComponent actions allow any authenticated user with

历史摘要 · 未重新核验 · GitHub Advisory

Statamic CMS's unsafe method invocation via collection sorting allows data destruction

CVE-2026-49287

### Impact The fix for GHSA-4jjr-vmv7-wh4w was incomplete. It addressed the issue in the query builder, but the same pr

历史摘要 · 未重新核验 · GitHub Advisory