Mermaid allows CSS injection applying to sibling elements of the diagram
CVE-2026-50159
### Summary Mermaid does not fully restrict CSS to the rendered SVG subtree. Although selectors are prefixed with `#mer
#severity:medium
共收录 5494 条相关情报。
← 返回所有主题Mermaid Architecture diagrams are vulnerable to prototype pollution
CVE-2026-71437
Rendering an untrusted `architecture-beta` diagram lets the diagram author write an arbitrary property with the value `h
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of...
CVE-2026-18859
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/u
Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows...
CVE-2026-70620
Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attacke
A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the...
CVE-2026-18818
A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView o
A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI (Open...
CVE-2026-18103
A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI (Open Management Application Program
A vulnerability has been found in Shandong Hoteam PDM Product Data Management System up to 8.3.10...
CVE-2026-18854
A vulnerability has been found in Shandong Hoteam PDM Product Data Management System up to 8.3.10. The impacted element
Ghost: Paid gift memberships obtainable at minimal cost via the donations feature
CVE-2026-59817
### Impact A vulnerability in Ghost's public donation checkout flow allowed an unauthenticated attacker to obtain full
Ghost: Member existence leak via magic link sign-in response
CVE-2026-53947
### Impact A discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacke
Ghost: Session Fixation in Ghost Admin
CVE-2026-70594
### Impact Ghost Admin did not invalidate existing sessions on login which could have allowed for session fixation atta
Ghost: Theme Upload Path Traversal
CVE-2026-70593
### Impact A vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This
Ghost: Database Backup Path Traversal
CVE-2026-70592
### Impact An Administrator-level user could remotely overwrite certain files on the filesystem leading to integrity an
Ghost: Server-Side Request Forgery in Image Fetching
CVE-2026-70591
### Impact A Server-Side Request Forgery (SSRF) in Ghost Admin allowed any staff-level user to perform a blind HTTP GET
A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function...
CVE-2026-18810
A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function of the file /api/wizard
A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not...
CVE-2026-68743
A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length
Ghost: Blind Password Hash Disclosure in Ghost Admin API
CVE-2026-70590
### Impact Any staff-level user was able to leak the hashed passwords of other staff users. An offline password-guessin
Ghost: Mobiledoc image-size fetch SSRF
CVE-2026-53946
### Impact When re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to
Ghost: Server-side request forgery via DNS rebinding in external request handling
CVE-2026-53945
### Impact Ghost’s private-IP check for outbound HTTP requests could be bypassed via DNS rebinding, allowing an attacke
Ghost: Private IP filtering bypass to make server-side requests to internal services
CVE-2026-53944
### Impact When making an external request, it is possible to bypass the IP filter that ensures the request isn't going
Ghost: Archived Offers can be Redeemed
CVE-2026-70589
### Impact A missing validation check allowed users to redeem subscription offers that were no longer active. ### Vuln