Electron: SameSite cookie restrictions are not applied to windows opened from links
CVE-2026-113796
### Impact Pages opened into a new window from a link were loaded as if the app itself had navigated there rather than
#severity:medium
共收录 5506 条相关情报。
← 返回所有主题Electron: Pointer lock permission requests can be attributed to the wrong frame
CVE-2026-113798
### Impact For `pointerLock` permission requests made from some cross-origin iframes, `session.setPermissionRequestHandl
Electron: openExternal permission requests can be attributed to the wrong origin
CVE-2026-114121
### Impact Requests to open external protocol URLs could be attributed to a document other than the one that asked for t
Astro: Reflected/Stored XSS via unescaped <script>/<style> tag content in JSX/MDX rendering
CVE-2026-114128
## Summary Astro's JSX and MDX rendering pipeline treated string children of `` and `` elements as trusted HTML. When a
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication...
CVE-2026-114732
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability in multi-
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource...
CVE-2026-114731
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vulnerability
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking...
CVE-2026-114729
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass. rcube_washtml in
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection...
CVE-2026-114725
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_send
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in...
CVE-2026-114722
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube_utils
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection...
CVE-2026-114726
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounc
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking...
CVE-2026-114728
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling o
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting...
CVE-2026-114718
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the passwo
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization...
CVE-2026-114715
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Mo
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection...
CVE-2026-114717
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a messa
virtualenv: Builtin creation follows linked environment directories
CVE-2026-113716
## Summary The builtin creator accepts existing directory symlinks through ensure_dir() and writes environment files th
virtualenv: Deletion recovery can change a symlink target's mode
CVE-2026-113724
## Summary The deletion error handler obtains permission bits with lstat() but applies them through chmod(), which foll
Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
CVE-2026-112396
### Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at
Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
CVE-2026-112391
### Summary `PdfParser`'s `get_value()` can recurse without any limit and crash with an uncaught `RecursionError`. It is
Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
CVE-2026-112901
``` ============================================================================ ReDoS in XbmImagePlugin: 512-byte file
Pillow: Image.quantize() with empty palette leaks uninitialized stack memory
CVE-2026-112898
``` ============================================================================ Image.quantize() with empty palette lea