Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a...

CVE-2026-44597

Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload,

历史摘要 · 未重新核验 · GitHub Advisory

Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of...

CVE-2026-44600

Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue.

历史摘要 · 未重新核验 · GitHub Advisory

etcd RBAC bypass allows unauthorized data access via PrevKv/lease attachment in nested transaction Put requests

CVE-2026-44283

### Impact _What kind of vulnerability is it? Who is impacted?_ A vulnerability in etcd allows read access via PrevKv,

历史摘要 · 未重新核验 · GitHub Advisory

Free5GC AMF has Missing Concurrent NAS SMC Validation During NGAP Handover

CVE-2026-42082

### Summary The AMF in Free5GC v4.2.1 does not enforce the concurrent security procedure rules defined in 3GPP TS 33.50

历史摘要 · 未重新核验 · GitHub Advisory

container: pf Rule Injection via Domain Name Argument in `container system dns create --localhost` Command

#### Product Name: container Github Link: https://github.com/apple/container Version: `**: exactly one rule is writte

历史摘要 · 未重新核验 · GitHub Advisory

Netty has HTTP Header Injection via HttpProxyHandler Disabled Validation (Incomplete Fix CVE-2025-67735)

CVE-2026-42578

# Security Vulnerability Report: HTTP Header Injection via HttpProxyHandler Disabled Validation in Netty ## 1. Vulnerab

历史摘要 · 未重新核验 · GitHub Advisory

OpenSearch has ineffective TLS certificate hostname verification

### Description A regression was introduced in OpenSearch 2.18.0 that caused the `plugins.security.ssl.transport.enforc

历史摘要 · 未重新核验 · GitHub Advisory

OpenSearch vulnerable to improper authorization for Rollover Requests

### Description A flaw was identified in the OpenSearch Security plugin's handling of index rollover requests. When a r

历史摘要 · 未重新核验 · GitHub Advisory

OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths

### Description A flaw was identified in the OpenSearch REST layer that could allow authorization checks to be bypassed

历史摘要 · 未重新核验 · GitHub Advisory

diesel-async may expose uninitialized padding bytes for MySQL temporal columns

### Summary diesel-async exposes uninitialized stack padding to safe code on every read of a MySQL `DATE`, `TIME`, `DAT

历史摘要 · 未重新核验 · GitHub Advisory

Kanidm has non-constant-time comparison of OAuth2 client_secret

### Summary The kanidmd OAuth2 token-exchange (`/oauth2/token`) and token-introspection (`/oauth2/token/introspect`) en

历史摘要 · 未重新核验 · GitHub Advisory

webauthn-rs-core/webauthn-authenticator-rs: Origin validation mismatch possible when subdomains are allowed

### Summary `webauthn-rs-core` ([Relying Party][rp]) and `webauthn-authenticator-rs` ([client][]) checked that [an `Ori

历史摘要 · 未重新核验 · GitHub Advisory

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.

CVE-2026-44405

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.

历史摘要 · 未重新核验 · GitHub Advisory

ciguard: Web UI is missing HTTP defence-in-depth headers

## Summary ciguard's FastAPI Web UI (`src/ciguard/web/app.py`) does not set HTTP defence-in-depth headers. OWASP ZAP ba

历史摘要 · 未重新核验 · GitHub Advisory

ciguard: discover_pipeline_files follows symlinks out of scan root

CVE-2026-44220

## Summary The `discover_pipeline_files()` function in `src/ciguard/discovery.py` (introduced in v0.8.0 and used by the

历史摘要 · 未重新核验 · GitHub Advisory

ciguard: Container image runs as root (no USER directive)

CVE-2026-44218

## Summary The published `ghcr.io/jo-jo98/ciguard` container image inherits the default root user because the `Dockerfi

历史摘要 · 未重新核验 · GitHub Advisory

parse-server: MFA SMS one-time password accepted twice under concurrent login

CVE-2026-43930

### Impact A race condition in the MFA SMS one-time password (OTP) login path allows two concurrent `/login` requests c

历史摘要 · 未重新核验 · GitHub Advisory

Geyser Vulnerable to Server-Side Request Forgery (SSRF) via Player Head Texture URL in Geyser

CVE-2026-42188

### Summary A server-side request forgery (SSRF) vulnerability exists in Geyser’s handling of Bedrock player head textur

历史摘要 · 未重新核验 · GitHub Advisory

OpenBao's Namespace Deletion May Not Delete Data Properly

CVE-2026-42186

### Impact When OpenBao's initial namespace deletion fails, subsequent retries fail to properly remove all data before

历史摘要 · 未重新核验 · GitHub Advisory

A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1. This vulnerability affects the...

CVE-2026-7783

A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1. This vulnerability affects the function AbstractKanban::appl

历史摘要 · 未重新核验 · GitHub Advisory