Ghost: File Upload Content-Type Spoofing

CVE-2026-53948

### Impact Insufficient validation of the client-supplied `Content-Type` on Ghost's Admin API file upload endpoint allo

历史摘要 · 未重新核验 · GitHub Advisory

Ghost: Cross-Site Scripting in Universal Import

CVE-2026-70588

### Impact The Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophically

CVE-2026-70493

## Summary The built-in knowledge search tools let a chat participant choose the pattern used to grep knowledge files. P

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints

CVE-2026-70491

## Summary A workspace tool shared with a read grant returned its full Python source to the recipient. Any authenticate

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check

CVE-2026-70490

## Summary The terminal WebSocket route authenticates its own first-message JWT instead of going through the HTTP depend

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing

CVE-2026-70489

## Summary In every affected release, automation recurrence parsing anchors minutely and hourly rules at a fixed date of

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: DNS Rebinding SSRF Bypass

CVE-2026-54020

## Summary Open WebUI vetted user-supplied URLs by resolving the hostname once and rejecting private, loopback and link-

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata

CVE-2026-70487

## Summary Open WebUI lets a client define a model inline on a chat request instead of selecting a saved workspace model

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup

CVE-2026-70488

## Summary A user with write access to one knowledge base could delete directories, and drop file embeddings, belonging

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Users denied the image-generation permission can still generate images via chat completions

CVE-2026-70484

## Summary An authenticated user whose `features.image_generation` permission has been revoked can still make the server

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart rendering

CVE-2026-70480

## Summary Open WebUI renders `vega` and `vega-lite` fenced code blocks in chat content by building a Vega view in the v

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages

CVE-2026-70481

## Summary On standard channels, the message update and delete handlers accepted any caller holding write access on the

历史摘要 · 未重新核验 · GitHub Advisory

Flowise: Unauthenticated Credential Abuse via Text-to-Speech Endpoint Allows Unauthorized Use of Private Chatflow TTS Credentials

## Summary The `/api/v1/text-to-speech/generate` endpoint is whitelisted (requires no authentication) and accepts any `

历史摘要 · 未重新核验 · GitHub Advisory

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition...

CVE-2026-47621

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager sing

历史摘要 · 未重新核验 · GitHub Advisory

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition...

CVE-2026-47620

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager sing

历史摘要 · 未重新核验 · GitHub Advisory

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of...

CVE-2026-47622

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that con

历史摘要 · 未重新核验 · GitHub Advisory

NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could...

CVE-2026-47619

NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A s

历史摘要 · 未重新核验 · GitHub Advisory

A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync...

CVE-2026-58041

A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to cont

历史摘要 · 未重新核验 · GitHub Advisory

A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response...

CVE-2026-58042

A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Rec

历史摘要 · 未重新核验 · GitHub Advisory

A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerability affects unknown code...

CVE-2026-18720

A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerability affects unknown code of the file /index.php?

历史摘要 · 未重新核验 · GitHub Advisory