#severity:low

共收录 1569 条相关情报。

← 返回所有主题
安全公告2026-06-21 发布INFO

A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function...

CVE-2026-12797

A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function async_pre_call_hook of the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this...

CVE-2026-12799

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this issue is the function ui_vi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is...

CVE-2026-12798

A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function load_open

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A vulnerability was determined in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform...

CVE-2026-12788

A vulnerability was determined in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This vulnerabi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0...

CVE-2026-12787

A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This affects an unk

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A vulnerability was identified in ILIAS Learning Management System 11.0. This issue affects the...

CVE-2026-12789

A vulnerability was identified in ILIAS Learning Management System 11.0. This issue affects the function ilTrQuery::exec

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this...

CVE-2026-12774

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the functi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A flaw has been found in Montodel House-Rental-Management up to...

CVE-2026-12776

A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A vulnerability was identified in BerriAI litellm up to 1.82.2. This affects an unknown function...

CVE-2026-12771

A vulnerability was identified in BerriAI litellm up to 1.82.2. This affects an unknown function of the file litellm/pro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function...

CVE-2026-12772

A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticate_user of the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an...

CVE-2026-12770

A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-20 发布INFO

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

CVE-2026-56355

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-20 发布INFO

Nuxt before 4.4.7 (and the 3.x branch before 3.21.7) contains a cross-site scripting...

CVE-2026-56317

Nuxt before 4.4.7 (and the 3.x branch before 3.21.7) contains a cross-site scripting vulnerability in the NoScript compo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-20 发布INFO

Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in...

CVE-2026-56325

Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in the preview subdomain r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-19 发布INFO

parse-server: LiveQuery discloses object data to a subscriber across an ACL read-access change

### Impact A Parse Server LiveQuery subscriber can receive object field values they are not authorized to read when a s

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-19 发布INFO

Sveltia CMS: Stored XSS in Markdown/RichText preview via unsandboxed same-origin iframe

### Impact A stored cross-site scripting (XSS) vulnerability affected the Markdown/RichText field preview renderer in S

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-19 发布INFO

SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected

CVE-2026-55866

### Impact Under concurrency, `CheckPermission` and `CheckBulkPermissions` can return `PERMISSIONSHIP_HAS_PERMISSION` f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-19 发布INFO

OpenBao's System Backend allows Unauthorized Management of the containing Namespace

CVE-2026-55775

### Summary A user that is granted namespace management (`/sys/namespaces`) capabilities within a non-root namespace ("

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-19 发布INFO

OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808

CVE-2026-55774

### Summary OpenBao users with access to the `sys/leases/revoke/:lease_id` endpoint in any namespace can revoke leases

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-19 发布INFO

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to...

CVE-2026-8668

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues.  Q

历史摘要 · 未重新核验 · GitHub Advisory