adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated...
CVE-2026-114102
adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attackers to crash the Node.
#severity:high
共收录 5396 条相关情报。
← 返回所有主题HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that allows...
CVE-2026-114106
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that allows remote attackers to read
Dulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in porcelain.checkout...
CVE-2026-114096
Dulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in porcelain.checkout(paths=[...]) that allo
Dulwich from 0.23.1 before 1.2.8 contains a path traversal vulnerability in CommitFilter...
CVE-2026-114097
Dulwich from 0.23.1 before 1.2.8 contains a path traversal vulnerability in CommitFilter._apply_index_filter() that allo
Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on...
CVE-2026-114094
Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrar
Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the...
CVE-2026-114090
Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp serv
Trigger.dev before 4.5.0 performs no authentication or organization check in the action handler...
CVE-2026-114092
Trigger.dev before 4.5.0 performs no authentication or organization check in the action handler of the dashboard run rep
Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI...
CVE-2026-114089
Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI authorization-code flow because
Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator...
CVE-2026-114088
Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socket.IO namespace that
Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the TSQL query compiler,...
CVE-2026-114081
Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the TSQL query compiler, which concatenates window-f
Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders...
CVE-2026-114082
Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session write acc
Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and...
CVE-2026-114083
Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and api/v2/packets endpoints
Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor...
CVE-2026-114085
Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor workload server that allows
Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in...
CVE-2026-114078
Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in DeleteTaskScheduleService and SetActiveOnTask
Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the /realtime/v1/runs...
CVE-2026-114084
Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the /realtime/v1/runs endpoint, which concatenates t
Trigger.dev before 4.6.0 contains an improper authorization vulnerability in the GET /api/v1...
CVE-2026-114069
Trigger.dev before 4.6.0 contains an improper authorization vulnerability in the GET /api/v1/projects/:projectRef/envvar
Trigger.dev before 4.6.0 contains a missing authorization vulnerability in the waitpoint token...
CVE-2026-114068
Trigger.dev before 4.6.0 contains a missing authorization vulnerability in the waitpoint token wait endpoint that allows
Trigger.dev before 4.7.3 contains a tenant filtering bypass vulnerability that allows...
CVE-2026-114065
Trigger.dev before 4.7.3 contains a tenant filtering bypass vulnerability that allows authenticated users to read other
Trigger.dev 4.5.0 before 4.6.2 contains an improper authorization vulnerability in the PUT...
CVE-2026-114067
Trigger.dev 4.5.0 before 4.6.2 contains an improper authorization vulnerability in the PUT snapshot-url session endpoint
Trigger.dev before 4.7.0 contains a missing authorization vulnerability that allows holders of...
CVE-2026-114066
Trigger.dev before 4.7.0 contains a missing authorization vulnerability that allows holders of unrestricted environment