fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references
CVE-2026-110725
### Impact `fast-uri`'s `serialize()`, `normalize()`, and `resolve()`, when called with the non-default option `referen
#severity:low
共收录 1562 条相关情报。
← 返回所有主题A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is...
CVE-2026-115800
A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function load_model o
A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of...
CVE-2026-115796
A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Manag
A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the...
CVE-2026-115797
A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management
SvelteKit: URL redirection to untrusted site via enhanced form submission
CVE-2026-114060
### Impact Applications using enhanced form actions (`use:enhance`) on routes that accept paths beginning with `//`, suc
SvelteKit : XSS via untrusted cache-control header in prerendered page
CVE-2026-114061
### Impact Applications that prerender pages and use `setHeaders` to set a `cache-control` header from an untrusted sou
A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the...
CVE-2026-106073
A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permissio
A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not...
CVE-2026-106071
A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allo
A weakness has been identified in gedelumbung HospitalManagement up to...
CVE-2026-115537
A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This af
A vulnerability was identified in gedelumbung HospitalManagement up to...
CVE-2026-115535
A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The aff
A security flaw has been discovered in gedelumbung HospitalManagement up to...
CVE-2026-115536
A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Th
A vulnerability was determined in gedelumbung HospitalManagement up to...
CVE-2026-115534
A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacte
A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated...
CVE-2026-115449
A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data
Jitsu console before 2.14.0-beta.41 contains an incorrect authorization vulnerability in sources...
CVE-2026-115509
Jitsu console before 2.14.0-beta.41 contains an incorrect authorization vulnerability in sources/state.ts handlers that
No description provided
CVE-2026-95721
No description provided
Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled
CVE-2026-114130
## Impact An application that renders `` with a value it does not control can be made to render an anchor whose `href`
Electron: Extension tabs.query returns tab URLs and titles without the tabs permission
CVE-2026-113797
### Impact `chrome.tabs.query()` returned each tab's `url` and `title` to extensions that held neither the `tabs` permis
Electron: Frame subscription trusts GPU-supplied frame geometry
CVE-2026-114122
### Impact Frame data received from the GPU process for `webContents.beginFrameSubscription` was not fully validated by
Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry
CVE-2026-114124
### Impact In offscreen rendering mode on macOS, frame data received from the GPU process was not fully validated by the
fastify is vulnerable to header validation bypass via case-sensitive propertyNames
CVE-2026-107832
### Impact Fastify lowercases header names in a `headers` schema before compilation, because Node.js stores request hea