Gogs Missing Authorization in Attachment Download

CVE-2026-52799

## Summary In Gogs 0.14.1, `GET /attachments/:uuid` returns the raw attachment file **without verifying whether the req

历史摘要 · 未重新核验 · GitHub Advisory

Gogs has Stored XSS in `.ipynb` Preview

CVE-2026-52798

# Summary Although `.ipynb` previews are sanitized on the server side via `/-/api/sanitize_ipynb`, the inserted content

历史摘要 · 未重新核验 · GitHub Advisory

@budibase/backend-core has potential SSRF DNS rebinding bypass in outbound fetch validation

CVE-2026-54353

Summary Authenticated users with automation permissions can bypass Budibase's SSRF blacklist through DNS rebinding. Th

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: Mass Assignment in Webhook Trigger Allows Cross-Workspace Automation Execution via appId Override

CVE-2026-54351

## Summary The webhook trigger endpoint in Budibase is publicly accessible and passes the full HTTP request body into a

历史摘要 · 未重新核验 · GitHub Advisory

@actual-app/sync-server: Disabled OpenID users keep access through existing session tokens

CVE-2026-49229

### Summary In OpenID multi-user mode, disabling a user only blocks future OpenID login for that identity. Existing Act

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: POST /api/attachments/:datasourceId/url is unauthenticated and lets anonymous callers mint S3 PUT pre-signed URLs using stored datasource IAM credentials

CVE-2026-50137

## Summary The Budibase server route `POST /api/attachments/:datasourceId/url` ([`packages/server/src/api/routes/static

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: Unauthenticated S3 signed upload URL generation allows arbitrary writes with stored datasource credentials

CVE-2026-50136

The application server exposes an unauthenticated endpoint that generates S3 `PutObject` presigned URLs using credential

历史摘要 · 未重新核验 · GitHub Advisory

Budibase has an Account Impersonation Issue — Chat Identity Link Hijacking via Missing Consent & CSRF

CVE-2026-50132

## Title **Chat Identity Link Hijacking — Attacker Can Silently Map Their Slack/Discord Identity to Any Authenticated B

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: SSRF via OAuth2 token endpoint URL reaches internal hosts and cloud metadata

CVE-2026-48153

## Summary `fetchToken` in the OAuth2 SDK makes a POST to a builder-supplied URL with plain node-fetch, skipping the `b

历史摘要 · 未重新核验 · GitHub Advisory

skillctl: argument injection, path traversal in --dest, FIFO/device DoS, hardlink exfiltration, and commit-trailer forgery

## Impact Following the path-safety patches in [GHSA-wx3m-whqv-xv47](https://github.com/umanio-agency/skillctl/security

历史摘要 · 未重新核验 · GitHub Advisory

WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows...

CVE-2026-53779

WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attackers t

历史摘要 · 未重新核验 · GitHub Advisory

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization...

CVE-2026-44272

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements use

历史摘要 · 未重新核验 · GitHub Advisory

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization...

CVE-2026-44271

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements use

历史摘要 · 未重新核验 · GitHub Advisory

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution...

CVE-2026-44274

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File Access vul

历史摘要 · 未重新核验 · GitHub Advisory

Gophish through 0.12.1 contains a denial of service vulnerability that allows authenticated users...

CVE-2026-39904

Gophish through 0.12.1 contains a denial of service vulnerability that allows authenticated users with the User role to

历史摘要 · 未重新核验 · GitHub Advisory

A command injection vulnerability has been identified in the DHCP option processing logic in...

CVE-2026-11834

A command injection vulnerability has been identified in the DHCP option processing logic in multiple TP-Link router mod

历史摘要 · 未重新核验 · GitHub Advisory

Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533)

CVE-2026-46608

### Summary The Glances XML-RPC server (`glances -s`) introduced a configurable CORS origin list in version 4.5.3 as a

历史摘要 · 未重新核验 · GitHub Advisory

Glances has Insecure Pickle Deserialization in its Version Cache that Leads to Arbitrary Code Execution

CVE-2026-46607

### Summary `glances/outdated.py` uses `pickle.load()` to read a version-check cache file stored at a predictable, worl

历史摘要 · 未重新核验 · GitHub Advisory

Glances is Vulnerable to Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py

CVE-2026-46606

### Summary The Glances KVM/QEMU monitoring engine (`glances/plugins/vms/engines/virsh.py`) passes VM domain names, rea

历史摘要 · 未重新核验 · GitHub Advisory

Spinnaker has uon-safe yaml deserialization, allowing RCE when using specific types

CVE-2026-44795

### Impact There's an unsafe YAML processing vulnerability that bypasses safe deserialization. This impacts users when w

历史摘要 · 未重新核验 · GitHub Advisory