golang.org/x/crypto/ssh vulnerable to invoking bypass of certificate restrictions
CVE-2026-39828
When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were
#severity:medium
共收录 5559 条相关情报。
← 返回所有主题golang.org/x/crypto/ssh/agent: Invoking pathological inputs can lead to client panic
CVE-2026-46598
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when
Lemur: JWT verifier honors attacker-supplied alg, enabling ATO
CVE-2026-55165
Lemur 1.9.0: JWT verifier trusts attacker-supplied alg from token header — defense-in-depth gap; chain-dependent ATO wit
Lemur user-update path stores plaintext passwords
CVE-2026-55164
## Summary `lemur.users.service.update()` writes a user's new password as plaintext to the `users.password` column. The
Lemur Privilege Escalation: Non-admin role members can rewrite role membership via PUT /api/1/roles/<id>
CVE-2026-55163
## Summary The `PUT /api/1/roles/` handler in `lemur/roles/views.py` gates only on `RoleMemberPermission(role_id).can(
Lemur: Crafted CRL/OCSP URLs in uploaded certificates lead to post-authentication SSRF
CVE-2026-55162
## Summary When verifying an uploaded certificate, `lemur/certificates/verify.py` extracts the CRL Distribution Point
ImageMagick: Policy Bypass can read disallowed files via symlink
CVE-2026-49219
An incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using
ImageMagick has a Heap Buffer Over-Write in MAT decoder on 32-bit systems
CVE-2026-48994
A missing check of a return value could lead to a heap buffer over-write in the MAT decoder on 32-bit systems.
ImageMagick Vulnerable to Stack Overflow in its MVG Decoder
CVE-2026-48734
A crafted MVG file could result in a stack overflow due to a missing depth or visited-set check.
ImageMagick has an Infinite Loop in subimage-search with crafted image
CVE-2026-48733
An infinite loop in the subimage-search operation can happen when using a crafted image.
ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method
CVE-2026-48724
When using an image with mask the Floyd-Steinberg dithering method will cause a negative heap buffer over-write.
nextflow auth login command has incorrect default permissions
CVE-2026-48722
### Impact `nextflow auth login` persists Seqera Platform OIDC tokens to `${NXF_HOME:-~/.nextflow}/seqera-auth.config`.
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion
CVE-2026-48529
### Summary When running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-glo
X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A...
CVE-2026-6731
X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN
Bitwarden Server before 2026.5.0 contains a broken access control vulnerability that allows any...
CVE-2026-57521
Bitwarden Server before 2026.5.0 contains a broken access control vulnerability that allows any authenticated user to ac
MessagePack-CSharp: Typeless deserialization type restrictions do not recurse into arrays or generic arguments
CVE-2026-48517
## Summary MessagePack-CSharp's typeless deserialization includes `MessagePackSerializerOptions.ThrowIfDeserializingTyp
OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows...
CVE-2026-8664
OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to exe
OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows...
CVE-2026-8658
OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows authenticated attackers to ex
Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows...
CVE-2026-9153
Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read ar
ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability. This...
CVE-2026-9774
ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote at