protobufjs: Text Format string map parsing can mutate returned map object prototype

CVE-2026-59876

## Summary The protobuf.js text format extension parsed string-keyed map entries using ordinary property assignment. A

历史摘要 · 未重新核验 · GitHub Advisory

protobufjs: Denial of Service via infinite loop in .proto option parsing

CVE-2026-59877

## Summary protobufjs parsed option names by advancing through schema tokens until it reached an `=` token, without che

历史摘要 · 未重新核验 · GitHub Advisory

webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header

CVE-2026-14631

### Impact An unauthenticated peer that can reach the `webpack-dev-server` process can terminate it by sending either a

历史摘要 · 未重新核验 · GitHub Advisory

webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints

CVE-2026-14620

### Impact The internal `/webpack-dev-server/open-editor` and `/webpack-dev-server/invalidate` endpoints perform state-

历史摘要 · 未重新核验 · GitHub Advisory

Guzzle: Cookie Disclosure and Injection via IP-Address Domains

CVE-2026-59883

### Impact `CookieJar` does not restrict a cookie scoped to an IP address to the exact host that set it. When a stored

历史摘要 · 未重新核验 · GitHub Advisory

Composer: Path traversal in package bin field lets dependencies chmod arbitrary host files

CVE-2026-59946

## Summary A Composer package declares its executables in the `bin` field of its `composer.json`. When Composer install

历史摘要 · 未重新核验 · GitHub Advisory

Composer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exposure)

CVE-2026-59947

## Summary When Composer is run with -vvv (debug verbosity), it could print a credential that was embedded directly in

历史摘要 · 未重新核验 · GitHub Advisory

node-tar: Process crash via PAX numeric path type confusion

CVE-2026-59871

### Summary A crafted 2.5KB tar archive crashes any Node.js process that extracts it. The PAX header parser coerces all

历史摘要 · 未重新核验 · GitHub Advisory

node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records

CVE-2026-59875

## Summary `node-tar` strips trailing `NUL` bytes from long-name (`L`) and long-linkpath (`K`) GNU extended headers but

历史摘要 · 未重新核验 · GitHub Advisory

Guzzle: Proxy-Authorization headers can be sent to origin servers

### Impact In affected versions, the built-in cURL handlers (`CurlHandler` and `CurlMultiHandler`) put every first-clas

历史摘要 · 未重新核验 · GitHub Advisory

Mistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution

CVE-2026-59929

## Summary **Type:** URL-scheme allowlist gap. The `safe_url` filter only blocks the four schemes `javascript:`, `vbscr

历史摘要 · 未重新核验 · GitHub Advisory

Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content

CVE-2026-59930

## Summary **Type:** Predictable identifier generation. The `toc` plugin and `TableOfContents` directive both default t

历史摘要 · 未重新核验 · GitHub Advisory

Mistune: Arbitrary File Read via Include directive path traversal

CVE-2026-59924

### Summary A path traversal issue exists in mistune's `Include` directive when markdown files are processed using `md.

历史摘要 · 未重新核验 · GitHub Advisory

Mistune: XSS via unescaped class option in Admonition directive

CVE-2026-59926

In `src/mistune/directives/admonition.py`, the `render_admonition()` function concatenates the `:class:` option directly

历史摘要 · 未重新核验 · GitHub Advisory

Mistune: XSS via percent-encoded javascript URI bypass in safe_url()

CVE-2026-59923

### Summary An XSS vulnerability in Mistune allows bypassing of safe_url() protections via percent-encoded javascript UR

历史摘要 · 未重新核验 · GitHub Advisory

Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for...

CVE-2026-58624

Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server

历史摘要 · 未重新核验 · GitHub Advisory

Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based)...

CVE-2026-57980

Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attac

历史摘要 · 未重新核验 · GitHub Advisory

Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication

CVE-2026-54246

## Description The `routesrv` component exposes the full cluster route topology (Ingress/RouteGroup configurations, bac

历史摘要 · 未重新核验 · GitHub Advisory

IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed...

CVE-2026-8861

IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error messag

历史摘要 · 未重新核验 · GitHub Advisory

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a...

CVE-2026-7771

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted stat

历史摘要 · 未重新核验 · GitHub Advisory