Trapster Community: Unauthenticated malformed DNS compression pointers crash per-packet honeypot handler

## Summary `trapster.libs.dns.decode_labels()` decodes DNS names from attacker-supplied UDP packets and recurses **once

历史摘要 · 未重新核验 · GitHub Advisory

Sharp Missing Authorization Check in Quick Creation Command Endpoints

CVE-2026-53634

### Impact The create and store endpoints of the Quick Creation Command feature did not enforce any authorization check.

历史摘要 · 未重新核验 · GitHub Advisory

async-tar PAX extension-header desync enables tar entry/content smuggling

CVE-2026-53600

## Summary `async-tar` v0.6.0 mis-applies a buffered PAX `size` extension to an intermediary extension header (a GNU lo

历史摘要 · 未重新核验 · GitHub Advisory

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over...

CVE-2026-59999

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not

历史摘要 · 未重新核验 · GitHub Advisory

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when...

CVE-2026-59996

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs betwee

历史摘要 · 未重新核验 · GitHub Advisory

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

CVE-2026-60001

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

历史摘要 · 未重新核验 · GitHub Advisory

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments,...

CVE-2026-59997

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important

历史摘要 · 未重新核验 · GitHub Advisory

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior:...

CVE-2026-59998

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if th

历史摘要 · 未重新核验 · GitHub Advisory

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ...

CVE-2026-59995

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is u

历史摘要 · 未重新核验 · GitHub Advisory

Weblate SSRF: outbound URL guard misses some private ranges

CVE-2026-50127

### Impact Weblate's `VCS_RESTRICT_PRIVATE` did not properly account for some transitional IPv6 ranges, multicast addre

历史摘要 · 未重新核验 · GitHub Advisory

oasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)

CVE-2026-53508

## Summary From **v1.13.2** through **v1.18.0**, oasdiff did not enforce `--allow-external-refs=false` (library: `opena

历史摘要 · 未重新核验 · GitHub Advisory

KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping

CVE-2026-53572

### Summary `pkg/scalers/postgresql_scaler.go` builds libpq-style connection strings by concatenating `key=value` pairs

历史摘要 · 未重新核验 · GitHub Advisory

Flask-Security-Too: WebAuthn reauthentication freshness bypass via cross-user assertion

### Summary Flask-Security-Too 5.8.0 and 5.8.1 mark a session as reauthentication-fresh after processing a WebAuthn ass

历史摘要 · 未重新核验 · GitHub Advisory

ha-mcp: Add-on settings and policy routes are reachable without authentication at the bare root path

### Summary In add-on mode, the ha-mcp settings UI routes are mounted both under the MCP secret path **and** at the bar

历史摘要 · 未重新核验 · GitHub Advisory

aiosmtplib vulnerable to SMTP command injection via CR/LF in sender/recipient address

CVE-2026-53533

### Summary `aiosmtplib`'s `SMTP.mail()`, `SMTP.rcpt()`, `SMTP.vrfy()` and `SMTP.expn()` send the caller-supplied email

历史摘要 · 未重新核验 · GitHub Advisory

Kite has an authenticated cluster RBAC bypass in /api/v1/overview

CVE-2026-53487

## Summary Authenticated Kite users with any role can request `/api/v1/overview` for a cluster that their roles do not

历史摘要 · 未重新核验 · GitHub Advisory

ratex-parser has unbounded parser recursion that leads to stack overflow (process abort)

CVE-2026-53531

### Summary RaTeX’s recursive-descent parser recurses one (or more) native stack frame per nesting level at `{`, `\lef

历史摘要 · 未重新核验 · GitHub Advisory

NocoBase through 2.1.20 contains a server-side request forgery vulnerability in the serverRequest...

CVE-2026-58468

NocoBase through 2.1.20 contains a server-side request forgery vulnerability in the serverRequest wrapper that allows au

历史摘要 · 未重新核验 · GitHub Advisory

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability...

CVE-2026-58471

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() f

历史摘要 · 未重新核验 · GitHub Advisory

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in...

CVE-2026-58470

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parse_content_range(

历史摘要 · 未重新核验 · GitHub Advisory