IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages...

CVE-2026-16964

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge replies due

历史摘要 · 未重新核验 · GitHub Advisory

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of...

CVE-2026-16980

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper

历史摘要 · 未重新核验 · GitHub Advisory

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive...

CVE-2026-17007

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a de

历史摘要 · 未重新核验 · GitHub Advisory

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of...

CVE-2026-16958

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-o

历史摘要 · 未重新核验 · GitHub Advisory

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive...

CVE-2026-16972

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to impro

历史摘要 · 未重新核验 · GitHub Advisory

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive...

CVE-2026-16973

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an

历史摘要 · 未重新核验 · GitHub Advisory

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of...

CVE-2026-17009

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL po

历史摘要 · 未重新核验 · GitHub Advisory

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to...

CVE-2026-16951

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute arbitrary code due t

历史摘要 · 未重新核验 · GitHub Advisory

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of...

CVE-2026-16952

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrol

历史摘要 · 未重新核验 · GitHub Advisory

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary...

CVE-2026-16944

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-base

历史摘要 · 未重新核验 · GitHub Advisory

Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)

CVE-2026-67448

## Summary The cross-site WebSocket hijacking fix was reimplemented as an origin check gated on a raw-URI prefix test,

历史摘要 · 未重新核验 · GitHub Advisory

Mailpit: SMTP DATA line reader buffers over-limit input before size enforcement

CVE-2026-67447

## Summary Mailpit's SMTP DATA reader enforces the configured `MaxMessageSize` only after `bufio.Reader.ReadBytes('\n')

历史摘要 · 未重新核验 · GitHub Advisory

gettext-converter: Prototype pollution in js2i18next() via crafted translation keys

CVE-2026-55451

### Impact `js2i18next()` is vulnerable to prototype pollution. When converting translations, it splits nested keys on

历史摘要 · 未重新核验 · GitHub Advisory

Wagtail: Improper restriction handling on Page translation API endpoint

### Impact A CMS user with the "submit translations" permission, could use the Admin API's "copy for translation" endpoi

历史摘要 · 未重新核验 · GitHub Advisory

Wagtail: Improper permission handling when copying snippets

### Impact A CMS user with "add" permission over a snippet model, but not "change" or "view" permission, could copy an e

历史摘要 · 未重新核验 · GitHub Advisory

Wagtail: Improper restriction handling on descendant collections in Documents and Images API

### Impact The Documents and Images [API V2](https://docs.wagtail.org/en/stable/advanced_topics/api/index.html) incorre

历史摘要 · 未重新核验 · GitHub Advisory

Winter: Reflected XSS through the search query parameter in the backend Table widget

### Impact Affected versions of Winter CMS render the `search` query parameter without HTML encoding inside a `` block

历史摘要 · 未重新核验 · GitHub Advisory

Winter: CSRF through AJAX handler names reachable as backend page actions

### Impact Affected versions of Winter CMS allow a backend AJAX handler to be invoked by a plain top-level `GET` naviga

历史摘要 · 未重新核验 · GitHub Advisory

Winter: Stored XSS through cached Brand Settings and Editor Settings custom styles

### Impact Users with the `backend.manage_branding` ("Customize the back-end") or `backend.manage_editor` ("Manage glob

历史摘要 · 未重新核验 · GitHub Advisory

Winter: My Account preview exposes another backend user's profile by record ID

### Impact `Backend\Controllers\MyAccount`, introduced in v1.2.13, declares an empty `$requiredPermissions` array so th

历史摘要 · 未重新核验 · GitHub Advisory