kuma-dp connects to control plane without verifying TLS certificate when no CA is configured

CVE-2026-52724

When kuma-dp is started against an HTTPS control plane and the operator did not pass a CA certificate, the data plane co

历史摘要 · 未重新核验 · GitHub Advisory

Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container

CVE-2026-52832

## Summary Nuclio Dashboard exposes `POST /api/functions` without authentication by default (NOP auth mode). The `spec.

历史摘要 · 未重新核验 · GitHub Advisory

Diesel has possible use after free when deserializing a SQLite database via `SqliteConnection::deserialize_readonly_database`

Diesel allows loading a SQLite database from a byte buffer, represented as `&[u8]`, at runtime via the `SqliteConnection

历史摘要 · 未重新核验 · GitHub Advisory

Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock

CVE-2026-53715

Vulnerability report without repro case. Repro case may be added later after harness is complete. **Preconditions (4):*

历史摘要 · 未重新核验 · GitHub Advisory

Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header

CVE-2026-53717

Vulnerability report without repro case. Repro case may be added later after harness is complete. **Preconditions (4):*

历史摘要 · 未重新核验 · GitHub Advisory

Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

CVE-2026-53719

Vulnerability report without repro case. Repro case may be added later after harness is complete. **Preconditions (4):*

历史摘要 · 未重新核验 · GitHub Advisory

Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit

CVE-2026-53716

Vulnerability report without repro case. Repro case may be added later after harness is complete. **Preconditions (4):*

历史摘要 · 未重新核验 · GitHub Advisory

Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass

CVE-2026-53718

### Impact Envoy Gateway accepts extension-managed custom backendRefs from an HTTPRoute to a backend resource in another

历史摘要 · 未重新核验 · GitHub Advisory

kumactl connects to control plane without verifying TLS certificate when no CA is configured

CVE-2026-50166

When an operator adds an HTTPS control plane profile to `kumactl` without providing a CA certificate, `kumactl` disables

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability has been found in RafyMrX TOKO-ONLINE-ROTI up to...

CVE-2026-15909

A vulnerability has been found in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected is a

历史摘要 · 未重新核验 · GitHub Advisory

A flaw has been found in H3C SecPath F1000-C8300 up to 20260522. This impacts an unknown function...

CVE-2026-15907

A flaw has been found in H3C SecPath F1000-C8300 up to 20260522. This impacts an unknown function of the file /webui/?g=

历史摘要 · 未重新核验 · GitHub Advisory

adawolfa/isdoc: Uncontrolled resource consumption (decompression bomb) when reading untrusted ISDOCX or PDF files

### Impact `adawolfa/isdoc` reads ISDOC invoices from ISDOCX (ZIP) archives and from PDF files with embedded ISDOC docu

历史摘要 · 未重新核验 · GitHub Advisory

ViewComponent: Reused Component Instances Retain Stale Render Context

CVE-2026-54497

# Reused Component Instances Retain Stale Render Context ## Summary `ViewComponent::Base` instances retain multiple re

历史摘要 · 未重新核验 · GitHub Advisory

open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters

CVE-2026-54495

## Summary A namespaced `FeatureFlagSource` or `InProcessConfiguration` resource can be referenced cross-namespace via

历史摘要 · 未重新核验 · GitHub Advisory

serde_with: KeyValueMap serialization panics on empty sequence or map entries

### Summary The public `KeyValueMap` serializer assumes that each mapped element has at least one field or item to use

历史摘要 · 未重新核验 · GitHub Advisory

websocket-driver: Resource limit bypass via message compression

CVE-2026-54490

### Impact If this library is used in tandem with the `permessage-deflate` extension, a WebSocket server or client can

历史摘要 · 未重新核验 · GitHub Advisory

websocket-driver: Memory exhaustion in HTTP header parser

CVE-2026-54465

### Impact If this library is used to implement a WebSocket server on top of a TCP server (rather than an HTTP server o

历史摘要 · 未重新核验 · GitHub Advisory

websocket-driver: Resource limit bypass via message compression

CVE-2026-54464

### Impact If this library is used in tandem with the `permessage-deflate` extension, a WebSocket server or client can

历史摘要 · 未重新核验 · GitHub Advisory

websocket-driver: Memory exhaustion via abuse of protocol length headers

CVE-2026-54463

### Impact The frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitra

历史摘要 · 未重新核验 · GitHub Advisory

Pixeldrain API key shared with unverified thirdparty sites

CVE-2026-54254

### Summary When processing Pixeldrain URLs, `cyberdrop-dl-patched` could send an `Authorization` header that includes

历史摘要 · 未重新核验 · GitHub Advisory