In Concrete CMS 9.5.0 and below, the RSS Displayer block accepts a feed URL from any page editor...

CVE-2026-7890

In Concrete CMS 9.5.0 and below, the RSS Displayer block accepts a feed URL from any page editor and fetches it server-s

历史摘要 · 未重新核验 · GitHub Advisory

For Concrete CMS 9.5.0 and below, OAuth 2.0 Authorization-Code Handler Bypasses Account Status. A...

CVE-2026-7887

For Concrete CMS 9.5.0 and below, OAuth 2.0 Authorization-Code Handler Bypasses Account Status. A user with uIsActive=0

历史摘要 · 未重新核验 · GitHub Advisory

Concrete CMS 9.5.0 and below is vulnerable to unauthorized file deletion due to an Inverted CSRF...

CVE-2026-7882

Concrete CMS 9.5.0 and below is vulnerable to unauthorized file deletion due to an Inverted CSRF token check in the Del

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse

The PasskeyEncipherImage method is vulnerable to information disclosure via AES-CTR nonce reuse. ImageMagick has update

历史摘要 · 未重新核验 · GitHub Advisory

ImageMagick: Division by Zero in binomial kernel

An user supplied large binomial kernel could result in an overflow that would lead to a division by zero.

历史摘要 · 未重新核验 · GitHub Advisory

Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`

CVE-2026-46637

### Description Several filters in the `twig/*` extras packages are registered with `is_safe => ['all']`, which tells T

历史摘要 · 未重新核验 · GitHub Advisory

Twig: Sandbox property allowlist bypass via the `column` filter (array_column on objects)

CVE-2026-46635

### Description The `column` filter passes its input straight to PHP's native `array_column()`. When the array elements

历史摘要 · 未重新核验 · GitHub Advisory

twig/intl-extra: Unbounded formatter memoisation in keyed on template-controlled arguments

CVE-2026-46629

### Description `IntlExtension` memoises every `\IntlDateFormatter` and `\NumberFormatter` it creates in instance-level

历史摘要 · 未重新核验 · GitHub Advisory

Twig: The `spaceless` filter implicitly marks its output as safe

CVE-2026-46628

### Description The `spaceless` filter is registered with `is_safe => ['html']`, which means Twig's autoescaper does no

历史摘要 · 未重新核验 · GitHub Advisory

NocoDB: Stale Auth Cache After API Token Deletion

CVE-2026-46554

### Summary Deleted API tokens continued to authenticate requests until their cache entry expired, because the auth cach

历史摘要 · 未重新核验 · GitHub Advisory

NocoDB: Attachment Size Limit Bypass via Upload-by-URL

CVE-2026-46553

### Summary The upload-by-URL path did not enforce `NC_ATTACHMENT_FIELD_SIZE` against either the remote file's advertise

历史摘要 · 未重新核验 · GitHub Advisory

NocoDB: OAuth Token Scope Not Enforced at ACL Layer Allows Scope Escalation

CVE-2026-46549

### Summary The OAuth token strategy attached `oauth_scope` and `oauth_granted_resources` to the request user, but the

历史摘要 · 未重新核验 · GitHub Advisory

SpiceDB: Caveat structures with nested lists can result in improper cache reuse

CVE-2026-46668

### Impact Users are impacted if: - They have a caveat structure with a nested list, e.g.: ```zed caveat shape(x l

历史摘要 · 未重新核验 · GitHub Advisory

OpenTofu: Excessive resource usage in "tofu init" when installing dependencies from attacker-controlled server

### Impact Unauthenticated denial of service. ### Summary When installing provider or module packages from attacker-co

历史摘要 · 未重新核验 · GitHub Advisory

Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning

CVE-2026-46342

### Summary The `/__nuxt_island/*` endpoint accepts attacker-controlled `props` query/body parameters and renders any i

历史摘要 · 未重新核验 · GitHub Advisory

Turbo: Unexpected local code execution during Yarn Berry detection

CVE-2026-45772

### Impact Turborepo can be vulnerable to arbitrary code execution when run in untrusted repositories that contain ma

历史摘要 · 未重新核验 · GitHub Advisory

GitHub CLI: GitHub Actions log output in `gh run view` allows terminal escape sequence injection

CVE-2026-45803

### Summary A security vulnerability has been identified in GitHub CLI that could allow terminal escape sequence inject

历史摘要 · 未重新核验 · GitHub Advisory

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to...

CVE-2026-45244

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automa

历史摘要 · 未重新核验 · GitHub Advisory

Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape...

CVE-2026-47090

Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd

历史摘要 · 未重新核验 · GitHub Advisory

OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure

CVE-2026-45683

### Summary The Java TLS ioctl probe reads user-controlled ioctl pointers with `bpf_probe_read` instead of `bpf_probe_r

历史摘要 · 未重新核验 · GitHub Advisory