A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the...
CVE-2026-85469
A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the upstream `Noelware/docke
#severity:high
共收录 5373 条相关情报。
← 返回所有主题@nuxtjs/mdc's URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration
CVE-2026-63671
## Summary `@nuxtjs/mdc` renders untrusted markdown (including raw HTML) to a Vue component tree. Across two prior advi
RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service
CVE-2026-63128
### Summary An unauthenticated remote attacker can leak one entry per HTTP request out of the in-memory session table o
RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery
CVE-2026-63127
### Summary The `rmcp` library does not validate the `resource` parameter in OAuth Protected Resource metadata (RFC 9728
djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path
CVE-2026-61599
### Impact The djust live transport resolves the LiveView to mount from a **client-supplied dotted path** by calling `__
djust has broken object-level access control (IDOR)
CVE-2026-61596
### Impact djust's per-object authorization (`get_object` + `has_object_permission`, ADR-017) was enforced on the WebSoc
djust: Unsigned client state snapshot is restored as trusted view state (privilege escalation / state injection)
CVE-2026-61591
### Impact For views that opt into state snapshots, the snapshot `state_json` embedded in the client page was restored o
djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id is the sole authorization capability (session hijack)
CVE-2026-61592
### Impact SSE sessions were keyed solely by a **client-chosen** `session_id` with no binding to the authenticated user
browserless versions 1.44.0 through 2.56.7 fail to enforce file protocol restrictions in...
CVE-2026-92811
browserless versions 1.44.0 through 2.56.7 fail to enforce file protocol restrictions in Playwright websocket endpoints,
changedetection.io through 0.60.6 fails to validate the Goto URL action in browser steps,...
CVE-2026-92815
changedetection.io through 0.60.6 fails to validate the Goto URL action in browser steps, allowing unauthenticated attac
ComfyUI before 0.30.0 fails to sanitize folder_name input in dataset save nodes, allowing...
CVE-2026-92816
ComfyUI before 0.30.0 fails to sanitize folder_name input in dataset save nodes, allowing attackers to write files to ar
decap-server contains a path traversal vulnerability in the local proxy containment guard that...
CVE-2026-92812
decap-server contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix
Nango through 0.70.4 fails to validate caller-supplied connection configuration values...
CVE-2026-92804
Nango through 0.70.4 fails to validate caller-supplied connection configuration values interpolated into provider token
Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is...
CVE-2026-92800
Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent document
phpList versions before 3.6.17 fail to validate cross-site request forgery tokens in the mass...
CVE-2026-92806
phpList versions before 3.6.17 fail to validate cross-site request forgery tokens in the mass subscriber removal form ha
Manticore Search versions 27.0.0 before 28.4.4 fail to validate permissions for all statements in...
CVE-2026-92796
Manticore Search versions 27.0.0 before 28.4.4 fail to validate permissions for all statements in multi-statement SQL re
cc-connect through 1.5.0 fails to enforce per-user allowlist filtering in the onCardAction...
CVE-2026-92801
cc-connect through 1.5.0 fails to enforce per-user allowlist filtering in the onCardAction handler for Feishu interactiv
@refinedev/inferencer through 7.0.0 fails to escape API field names when interpolating them into...
CVE-2026-92784
@refinedev/inferencer through 7.0.0 fails to escape API field names when interpolating them into generated JSX source co
OpenSign through 2.41.3 fails to validate caller identity in the getDocument cloud function when...
CVE-2026-92794
OpenSign through 2.41.3 fails to validate caller identity in the getDocument cloud function when one-time-password verif
Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools...
CVE-2026-92795
Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticate