There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user...

CVE-2026-64198

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results

历史摘要 · 未重新核验 · GitHub Advisory

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user...

CVE-2026-64200

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results

历史摘要 · 未重新核验 · GitHub Advisory

There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user...

CVE-2026-64195

There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Success

历史摘要 · 未重新核验 · GitHub Advisory

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user...

CVE-2026-64197

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in

历史摘要 · 未重新核验 · GitHub Advisory

SiYuan: Encrypted-notebook key-derivation material and wrapped notebook keys disclosed to anonymous readers, enabling offline master-password cracking

CVE-2026-72801

**CVE:** This vulnerability corresponds to [CVE-2026-72801](https://nvd.nist.gov/vuln/detail/CVE-2026-72801). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

SiYuan: Graph endpoints omit the publish-password tier: anonymous readers receive block-level content of password-protected documents

CVE-2026-72804

**CVE:** This vulnerability corresponds to [CVE-2026-72804](https://nvd.nist.gov/vuln/detail/CVE-2026-72804). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

SiYuan: Second-order SSTI to arbitrary SQL via attribute-view template column (queryBlocks): malicious imported package executes SQL on victim kernel

CVE-2026-72807

**CVE:** This vulnerability corresponds to [CVE-2026-72807](https://nvd.nist.gov/vuln/detail/CVE-2026-72807). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

SiYuan: Localhost-trust admin bypass on auth-code-gated endpoints, with potential remote reachability via the fixed-port proxy

CVE-2026-72809

**CVE:** This vulnerability corresponds to [CVE-2026-72809](https://nvd.nist.gov/vuln/detail/CVE-2026-72809). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

SiYuan: Publish-boundary bypass via WebSocket broadcast: anonymous readers receive a live unfiltered feed of all edits including protected/forbidden documents (publish mode)

CVE-2026-72810

**CVE:** This vulnerability corresponds to [CVE-2026-72810](https://nvd.nist.gov/vuln/detail/CVE-2026-72810). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an...

CVE-2026-85222

A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of

历史摘要 · 未重新核验 · GitHub Advisory

Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker...

CVE-2026-85051

Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary cod

历史摘要 · 未重新核验 · GitHub Advisory

Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a...

CVE-2026-85053

Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute

历史摘要 · 未重新核验 · GitHub Advisory

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the...

CVE-2026-8862

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code,

历史摘要 · 未重新核验 · GitHub Advisory

SiYuan: Anonymous publish-password authentication bypass via getHeadingChildrenDOM / getHeading*Transaction / getBacklinkDoc (publish mode)

**CVE:** This vulnerability corresponds to [CVE-2026-68584](https://nvd.nist.gov/vuln/detail/CVE-2026-68584). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

SiYuan: Cross-boundary content disclosure via getBacklinkDoc/getBackmentionDoc (publish mode): reader-reachable rendered DOM of publish-forbidden docs; sibling list endpoints ar...

CVE-2026-68586

**CVE:** This vulnerability corresponds to [CVE-2026-68586](https://nvd.nist.gov/vuln/detail/CVE-2026-68586). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

SiYuan: Full-content disclosure of publish-disabled documents via getHeading*Transaction endpoints (publish mode): reader-reachable rendered DOM with no publish-access check

CVE-2026-68587

**CVE:** This vulnerability corresponds to [CVE-2026-68587](https://nvd.nist.gov/vuln/detail/CVE-2026-68587). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

toml-node: Uncontrolled Recursion

CVE-2026-77465

### Summary `toml.parse()` crashes with an uncaught `RangeError: Maximum call stack size exceeded` when parsing deeply

历史摘要 · 未重新核验 · GitHub Advisory

toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronization

CVE-2026-63376

### Summary `toml.parse()` writes attacker-controlled keys onto `Object.prototype`. The compiler protects the tables it

历史摘要 · 未重新核验 · GitHub Advisory

SiYuan: Path Traversal via unvalidated avID in RenderAttributeView/AV read endpoints : reader-reachable cross-scope attribute-view disclosure

CVE-2026-69086

**CVE:** This vulnerability corresponds to [CVE-2026-69086](https://nvd.nist.gov/vuln/detail/CVE-2026-69086). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

Phoenix: Unbounded channel joins per transport enables DoS over few connections

CVE-2026-56811

### Summary Phoenix transports do not limit the number of channels in a given connection, making it easy to spawn hundr

历史摘要 · 未重新核验 · GitHub Advisory