PHP JWT Framework: JWSVerifier uses algorithm from unprotected header, enabling algorithm confusion attacks

## Summary `JWSVerifier::getAlgorithm()` in `src/Library/Signature/JWSVerifier.php` (line 144) merges protected and unp

历史摘要 · 未重新核验 · GitHub Advisory

PHP JWT Library: PBES2-HS*+A*KW unwrap accepts an unbounded p2c iteration count, enabling CPU-amplification denial of service

### Impact When a JWE uses a password-based key-encryption algorithm (`PBES2-HS256+A128KW`, `PBES2-HS384+A192KW`, `PBES

历史摘要 · 未重新核验 · GitHub Advisory

spomky-labs/otphp: Unbounded digits parameter in a provisioning URI triggers an uncaught DivisionByZeroError in OTP generation

## Summary The `digits` parameter parsed from a provisioning URI is validated only with a lower bound (`$value > 0`) an

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Workspace-derived service PATH could influence trash command selection

CVE-2026-53865

### Summary Workspace-derived service PATH could influence trash command selection. In affected versions, a workspace-d

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots

CVE-2026-53858

### Summary Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots. In affected versions, a wo

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Discord allowFrom could bind to mutable display names

CVE-2026-53849

### Summary Discord allowFrom could bind to mutable display names. In affected versions, a Discord account able to chan

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Workspace .env npm_execpath could influence bundled runtime dependency install

CVE-2026-53846

### Summary Workspace .env npm_execpath could influence bundled runtime dependency install. In affected versions, a wor

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns

CVE-2026-53853

### Summary OpenClaw's exec allowlist supported optional `argPattern` entries to restrict the arguments accepted for an

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Zalo allowFrom could bind to mutable display names

CVE-2026-53857

### Summary Zalo allowFrom could bind to mutable display names. In affected versions, a Zalo friend or contact with mut

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Shell positional parameters could weaken strict inline-eval checks

CVE-2026-53855

### Summary Shell positional parameters could weaken strict inline-eval checks. In affected versions, a command request

历史摘要 · 未重新核验 · GitHub Advisory

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were...

CVE-2026-38718

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a bu

历史摘要 · 未重新核验 · GitHub Advisory

The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and...

CVE-2026-54104

The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contrac

历史摘要 · 未重新核验 · GitHub Advisory

HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference...

CVE-2026-55204

HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert()

历史摘要 · 未重新核验 · GitHub Advisory

In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate...

CVE-2026-46580

In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a workspace were auto

历史摘要 · 未重新核验 · GitHub Advisory

In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g. ...

CVE-2026-44691

In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g. .theia/tasks.json, .vscode/t

历史摘要 · 未重新核验 · GitHub Advisory

In Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and...

CVE-2026-44688

In Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and directory names as part of its

历史摘要 · 未重新核验 · GitHub Advisory

Crawl4AI: Unauthenticated SSRF on the Docker server streaming crawl path (/crawl/stream)

### Summary The Docker API server applied its SSRF destination check (`validate_url_destination`) on the non-streaming

历史摘要 · 未重新核验 · GitHub Advisory

budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQL

### Summary This advisory covers three distinct SQL Injection vulnerabilities within Budibase's database connectors (Pos

历史摘要 · 未重新核验 · GitHub Advisory

AgenticMail: Unauthenticated inbound mail triggers bypassPermissions resume of the operator's Claude Code session (bridge-wake)

## Summary Two inbound-mail handlers act on a privileged effect without verifying that the sender is the operator, while

历史摘要 · 未重新核验 · GitHub Advisory

AgenticMail: Cross-agent task authorization bypass in AgenticMail API

## Summary A low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supp

历史摘要 · 未重新核验 · GitHub Advisory