SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the...
CVE-2026-114063
SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview server on
#severity:high
共收录 5396 条相关情报。
← 返回所有主题ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allows authenticated...
CVE-2026-114059
ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allows authenticated users, including read-o
vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio...
CVE-2026-114052
vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving that caches a
vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability that...
CVE-2026-114055
vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability that allows remote clients to
vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to...
CVE-2026-114054
vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache k
vLLM before 0.31.0 skips the min_tokens <= max_tokens check for /inference/v1/generate requests...
CVE-2026-114051
vLLM before 0.31.0 skips the min_tokens <= max_tokens check for /inference/v1/generate requests with a null max_tokens,
vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no...
CVE-2026-114050
vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on cache
FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB...
CVE-2026-114043
FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because winp
FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel...
CVE-2026-114045
FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparo
FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool...
CVE-2026-114042
FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the ow
FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation...
CVE-2026-114046
FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null p
FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its...
CVE-2026-114047
FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts unt
A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the...
CVE-2026-113736
A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap o
Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect...
CVE-2021-48020
Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when
Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function...
CVE-2020-37287
Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function outputs when complex ty
Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions...
CVE-2026-105044
Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingte
Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist)...
CVE-2025-71437
Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that allow
Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the...
CVE-2021-48018
Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as cont
Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect...
CVE-2020-37286
Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when
A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix
CVE-2026-111765
The GHSA-9rhm fix added this safe setting in AndroidA2AHttpClient.createConnection(): connection.setInstanceFollowR