A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected...
CVE-2026-16763
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown funct
#severity:low
共收录 1585 条相关情报。
← 返回所有主题A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function...
CVE-2026-16764
A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file do
A security issue was discovered in the Kubernetes Java client library where a compromised pod may...
CVE-2026-15687
A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new
Ruby json: JSON generator heap buffer overflow when streaming to an IO
CVE-2026-54696
### Summary `JSON.dump(obj, io)` and `JSON::State#generate(obj, io)` can write past the internal JSON generator buffer
AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability...
CVE-2026-65699
AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability that allows authentica
A vulnerability was detected in publint up to 0.1.4. This impacts the function child_process.exec...
CVE-2026-16631
A vulnerability was detected in publint up to 0.1.4. This impacts the function child_process.exec of the file src/node/p
A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the...
CVE-2026-16628
A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the function child_process.exec o
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3....
CVE-2026-16630
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the funct
JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)
The extension allowlist/blocklist check inside `PyPIExtensionManager.install()` was not enforced due to a missing await.
LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks
CVE-2026-59821
### Impact LiteLLM's Custom Code Guardrails production create/update paths did not apply the same sandboxing and valida
LiteLLM: Local file read via request-supplied OIDC file references
CVE-2026-59819
### Impact LiteLLM's `/health/test_connection` endpoint resolved request-supplied environment and OIDC file references
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Impacted is...
CVE-2026-16490
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of t
A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function...
CVE-2026-16492
A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of
A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the...
CVE-2026-16488
A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the function subprocess.Po
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected...
CVE-2026-16485
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some u
A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function...
CVE-2026-16489
A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function _execCommand in the library lib
A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the...
CVE-2026-16517
A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header function i
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects...
CVE-2026-16486
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the f
Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component:...
CVE-2026-62508
Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Support
Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons
## Summary `Loofah::HTML5::Scrub.allowed_uri?` does not correctly reject `javascript:` or `vbscript:` URIs when the sch