Creating a "2dsphere_bucket" index on a non-timeseries bucket collection will succeed, but any...

CVE-2026-8843

Creating a "2dsphere_bucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to ins

历史摘要 · 未重新核验 · GitHub Advisory

In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), the broker mishandles...

CVE-2025-56352

In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), the broker mishandles protocol violations duri

历史摘要 · 未重新核验 · GitHub Advisory

Thermo Fisher Scientific Torrent Suite Dx through 5.14.2 has a privilege escalation vulnerability...

CVE-2026-41085

Thermo Fisher Scientific Torrent Suite Dx through 5.14.2 has a privilege escalation vulnerability that may allow an auth

历史摘要 · 未重新核验 · GitHub Advisory

ngrok v4.3.3 and 5.0.0-beta.2 is vulnerable to Command Injection.

CVE-2025-57282

ngrok v4.3.3 and 5.0.0-beta.2 is vulnerable to Command Injection.

历史摘要 · 未重新核验 · GitHub Advisory

OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads

CVE-2026-45678

### Summary The Postgres protocol parser assumes `BIND` message payloads contain a valid NUL-terminated portal name. A

历史摘要 · 未重新核验 · GitHub Advisory

Postgrex: Channel-name SQL injection in `Postgrex.Notifications.listen/3`

CVE-2026-32687

### Summary SQL injection in `Postgrex.Notifications.listen/3`: the `channel` argument is interpolated straight into `L

历史摘要 · 未重新核验 · GitHub Advisory

Docker: Race condition in docker cp allows bind mount redirection to host path

CVE-2026-42306

## Summary A race condition during `docker cp` mount setup allows a malicious container to redirect a bind mount target

历史摘要 · 未重新核验 · GitHub Advisory

CloakBrowser: Unauthenticated path traversal via fingerprint parameter in cloakserve leads to arbitrary directory deletion

CVE-2026-45727

The `cloakserve` CDP multiplexer uses the user-supplied `fingerprint` query parameter directly as a filesystem path comp

历史摘要 · 未重新核验 · GitHub Advisory

Docker: `PUT /containers/{id}/archive` executes container binary on the host

CVE-2026-41567

## Summary When a user uploads a compressed archive into a container, a malicious image can execute arbitrary code with

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: Builder-to-Admin Privilege Escalation via onboardUsers Endpoint Without SMTP Configuration

CVE-2026-45716

## Summary The `POST /api/global/users/onboard` endpoint is protected by `workspaceBuilderOrAdmin` middleware, allowing

历史摘要 · 未重新核验 · GitHub Advisory

n8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant headers are absent or incomplete

CVE-2026-45707

## Summary When `ENABLE_MULTI_TENANT=true`, the HTTP transport documents that the target n8n instance is selected per-r

历史摘要 · 未重新核验 · GitHub Advisory

multiparty vulnerable to ReDoS via filename parsing

CVE-2026-8159

### Impact multiparty@4.2.3 and lower versions are vulnerable to denial of service via regular expression backtracking

历史摘要 · 未重新核验 · GitHub Advisory

multiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsing

CVE-2026-8162

### Impact multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught exception. By sending a

历史摘要 · 未重新核验 · GitHub Advisory

multiparty: Denial of Service via Prototype Pollution leads to Uncaught Exception

CVE-2026-8161

### Impact multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught exception. By sending a

历史摘要 · 未重新核验 · GitHub Advisory

ruby-jwt: Empty-key HMAC bypass; cross-language sibling of CVE-2026-44351

CVE-2026-45363

`JWT.decode(token, '', true, algorithm: 'HS256')` accepts an attacker-forged token. `OpenSSL::HMAC.digest('SHA256', '',

历史摘要 · 未重新核验 · GitHub Advisory

TinyIce: Missing authentication on WebRTC ingest endpoint allows unauthorized stream injection

CVE-2026-45327

## Title Missing authentication on WebRTC ingest endpoint allows unauthenticated stream injection in TinyIce ## Ecosys

历史摘要 · 未重新核验 · GitHub Advisory

@tmlmobilidade/utils has prototype pollution in its setValueAtPath

CVE-2026-45325

### Impact Prototype pollution vulnerability in @tmlmobilidade/utils for setValueAtPath(). ### Patches A fix is availab

历史摘要 · 未重新核验 · GitHub Advisory

dynoxide: DNS rebinding and cross-origin CSRF via MCP HTTP transport

## Summary dynoxide's MCP HTTP transport was vulnerable to DNS rebinding via its transitive `rmcp` dependency, plus a r

历史摘要 · 未重新核验 · GitHub Advisory

parse-nested-form-data has Prototype Pollution via `__proto__` in FormData field names

CVE-2026-45302

## Summary `parseFormData()` walks bracket and dot-notation FormData field names into nested objects without filtering

历史摘要 · 未重新核验 · GitHub Advisory

async-http-client: Cookie header not stripped on cross-origin redirect

CVE-2026-45300

## Summary async-http-client leaks `Cookie` headers to cross-origin redirect targets. When following a redirect across

历史摘要 · 未重新核验 · GitHub Advisory