Gitea: Webhook Authorization Header Returned in Plaintext via API
CVE-2026-58511
## Summary The `ToHook()` function in `services/webhook/general.go` decrypts the webhook's `HeaderAuthorizationEncrypte
#severity:low
共收录 1585 条相关情报。
← 返回所有主题A vulnerability was identified in itsourcecode Hospital Management System 1.0. This vulnerability...
CVE-2026-16334
A vulnerability was identified in itsourcecode Hospital Management System 1.0. This vulnerability affects unknown code o
@astrojs/netlify generates an overly-broad Netlify Image CDN allowlist because remotePatterns.pathname metacharacters are not escaped
## Summary The `@astrojs/netlify` adapter converts each `image.remotePatterns` entry into a regular expression that is
body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement
CVE-2026-12590
### Impact When body-parser is configured with an invalid `limit` option value, such as an unparseable string or `NaN`,
@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect
CVE-2026-59730
### Impact With `trailingSlash: 'always'` configured, the `@astrojs/node` standalone server's static file handler appen
Astro: Cross-site scripting via unescaped transition:* directive values on hydrated islands
CVE-2026-59727
### Summary When a `transition:persist`, `transition:scope`, or `transition:persist-props` directive is applied to a cl
File Browser: Share API exposes the password hash and bypass token
CVE-2026-62684
## Summary When a user creates a password-protected share or lists existing shares, the JSON response includes the full
IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9...
CVE-2026-7364
IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Ident
A vulnerability was detected in AstrBotDevs AstrBot up to 4.25.2. This affects the function...
CVE-2026-16074
A vulnerability was detected in AstrBotDevs AstrBot up to 4.25.2. This affects the function update_plugin/update_all_plu
IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs...
CVE-2026-14971
IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attac
A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this...
CVE-2026-16073
A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function S
oapi-codegen: OpenAPI Server Description Escapes Generated Go Comment and Injects Executable Code
## Summary The vulnerability in oapi-codegen seems to be similar with CVE-2026-22785, which is a generated-code inject
The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions...
CVE-2025-59866
The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Es
HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce...
CVE-2026-21762
HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce browser protections ag
HCL DevOps Loop is affected by insufficient input validation that allows special characters where...
CVE-2026-21764
HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restric
Grav Flex-Objects before version 1.4.3 contains a broken access control vulnerability in the...
CVE-2026-62235
Grav Flex-Objects before version 1.4.3 contains a broken access control vulnerability in the admin-next REST API that al
grav-plugin-login before 3.8.11 contains a cross-site request forgery (CSRF) vulnerability in the...
CVE-2026-62236
grav-plugin-login before 3.8.11 contains a cross-site request forgery (CSRF) vulnerability in the login.regenerate2FASec
OpenClaw versions before 2026.5.18 contain an authorization bypass vulnerability in skill command...
CVE-2026-62225
OpenClaw versions before 2026.5.18 contain an authorization bypass vulnerability in skill command dispatch that allows l
OpenClaw 2026.5.12 before 2026.5.26 contain an incorrect authorization vulnerability in the...
CVE-2026-62221
OpenClaw 2026.5.12 before 2026.5.26 contain an incorrect authorization vulnerability in the ClickClack allowFrom feature
OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the...
CVE-2026-62224
OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature binds to mu