Broken dropper in @mistralai/mistralai, @mistralai/mistralai-azure, @mistralai/mistralai-gcp
Mistral npm `@mistralai/mistralai`, `@mistralai/mistralai-azure`, `@mistralai/mistralai-gcp` were compromised by a suppl
#severity:low
共收录 1569 条相关情报。
← 返回所有主题Sulu: Used API Keys may be available via Admin API
### Impact The users endpoint controller exposes a project's apiKey field to the logged-in user, provided they have per
LibreNMS: Cross-Site Scripting in ShowConfigController
CVE-2026-2728
### Summary A Stored Cross-Site Scripting (XSS) vulnerability exists in the ShowConfig page of devices affected by the R
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to validate the Host header when...
CVE-2026-6333
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to validate the Host header when constructing response UR
Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent server-rendered content from...
CVE-2026-4643
Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent server-rendered content from closing an underlying
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to check if {{team_id}} was being...
CVE-2026-4286
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to check if {{team_id}} was being changed when updating p
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce client identity binding...
CVE-2026-6334
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce client identity binding during the OAuth autho
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to escape some variables that...
CVE-2026-3495
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to escape some variables that could contain malicious con
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to validate that the...
CVE-2026-4273
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to validate that the RefreshedToken differs from the orig
A vulnerability has been found in Tencent WeKnora up to 0.3.6. Affected by this issue is the...
CVE-2026-8786
A vulnerability has been found in Tencent WeKnora up to 0.3.6. Affected by this issue is the function getKnowledgeBaseFo
A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function...
CVE-2026-8784
A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function change_file_status of the file c
A security vulnerability has been detected in omec-project amf up to 2.1.3-dev. This impacts the...
CVE-2026-8783
A security vulnerability has been detected in omec-project amf up to 2.1.3-dev. This impacts the function UERadioCapabil
A vulnerability was detected in Edimax BR-6228NC 1.22. Affected by this issue is the function mp...
CVE-2026-8774
A vulnerability was detected in Edimax BR-6228NC 1.22. Affected by this issue is the function mp of the file /goform/mp
A vulnerability was determined in omec-project amf up to 2.1.3-dev. Impacted is the function...
CVE-2026-8779
A vulnerability was determined in omec-project amf up to 2.1.3-dev. Impacted is the function NGSetupRequest of the file
A vulnerability was found in Edimax BR-6428NS 1.10. This issue affects the function...
CVE-2026-8777
A vulnerability was found in Edimax BR-6428NS 1.10. This issue affects the function formStaDrvSetup of the file /goform/
A weakness has been identified in omec-project amf up to 2.1.3-dev. This affects an unknown...
CVE-2026-8782
A weakness has been identified in omec-project amf up to 2.1.3-dev. This affects an unknown function of the file ngap/ha
A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is...
CVE-2026-8781
A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the function RANConfigu
A vulnerability was identified in omec-project amf up to 2.1.3-dev. The affected element is an...
CVE-2026-8780
A vulnerability was identified in omec-project amf up to 2.1.3-dev. The affected element is an unknown function of the f
A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function...
CVE-2026-8769
A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler
A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown...
CVE-2026-8772
A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown function of the component Admi