Grav CMS scheduler-webhook plugin contains an authentication bypass vulnerability that allows...

CVE-2026-57852

Grav CMS scheduler-webhook plugin contains an authentication bypass vulnerability that allows unauthenticated remote att

历史摘要 · 未重新核验 · GitHub Advisory

An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to...

CVE-2026-51385

An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code v

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted element...

CVE-2026-16324

A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted element is an unknown function

历史摘要 · 未重新核验 · GitHub Advisory

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is...

CVE-2026-12900

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-S

历史摘要 · 未重新核验 · GitHub Advisory

Guzzle: URI fragments disclosed in redirect Referer headers

### Impact When the optional `referer` redirect setting is enabled, affected versions of `RedirectMiddleware` can copy

历史摘要 · 未重新核验 · GitHub Advisory

Guzzle: Host-only cookie scope is not preserved

### Impact In affected versions, `CookieJar` does not preserve whether a response cookie was set without a `Domain` att

历史摘要 · 未重新核验 · GitHub Advisory

Guzzle: Unbounded response cookies risk denial of service

### Impact In affected versions, Guzzle's built-in `CookieJar` accepts any number of `Set-Cookie` header fields from on

历史摘要 · 未重新核验 · GitHub Advisory

Astro: composable `astro/hono` pipeline bypasses `security.checkOrigin` when `middleware()` is absent or misordered

## Summary In the composable `astro/hono` pipeline, the `security.checkOrigin` protection is only installed by the `mid

历史摘要 · 未重新核验 · GitHub Advisory

Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)

CVE-2026-59729

## Summary The fix for CVE-2026-54298 (GHSA-jrpj-wcv7-9fh9) added an `INVALID_ATTR_NAME_CHAR` guard to `addAttribute()`

历史摘要 · 未重新核验 · GitHub Advisory

@astrojs/rss: XML Injection via Unescaped RSS Feed Fields

CVE-2026-59728

## Summary In `@astrojs/rss`, the `source.title` and `enclosure.type` item fields are interpolated directly into XML te

历史摘要 · 未重新核验 · GitHub Advisory

Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

CVE-2026-59203

### Summary Pillow's EPS parser (PIL/EpsImagePlugin.py) accepts a negative byte count in the %%BeginBinary directive. A

历史摘要 · 未重新核验 · GitHub Advisory

Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

CVE-2026-59198

### Summary Pillow's TGA RLE encoder reads past its row buffer when saving a mode `"1"` image. Adjacent process heap by

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability

CVE-2026-50659

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET

历史摘要 · 未重新核验 · GitHub Advisory

Axios form serializer maxDepth bypass via {} metatoken

## Summary Axios versions in the fixed lines for GHSA-62hf-57xw-28j9 still contain an incomplete depth-limit bypass in

历史摘要 · 未重新核验 · GitHub Advisory

Axios: Nested axios option objects can consume polluted prototype values

## Summary Axios can consume inherited properties from nested request option objects when the JavaScript process alread

历史摘要 · 未重新核验 · GitHub Advisory

Axios: HTTP/2 streamed uploads bypass `maxBodyLength`

## Summary Axios versions with Node.js HTTP/2 support allow streamed request bodies to bypass `maxBodyLength` enforceme

历史摘要 · 未重新核验 · GitHub Advisory

Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`

## Summary axios’ fetch adapter does not enforce `maxBodyLength` for live WHATWG `ReadableStream` request bodies whose

历史摘要 · 未重新核验 · GitHub Advisory

Axios: Prototype pollution gadgets can alter axios request construction

## Summary axios is vulnerable to read-side prototype-pollution gadgets when `Object.prototype` has already been pollut

历史摘要 · 未重新核验 · GitHub Advisory

Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios

## Summary Axios versions containing `lib/helpers/shouldBypassProxy.js` do not treat `0.0.0.0` as a local address when

历史摘要 · 未重新核验 · GitHub Advisory

File Browser: Archive builder turns backslash filenames into path traversal (zip-slip)

CVE-2026-62843

## Summary The fix for `GHSA-gxjx-7m74-hcq8` / `CVE-2026-54093` (shipped in v2.63.6) added a `strings.ReplaceAll(nameIn

历史摘要 · 未重新核验 · GitHub Advisory