Improper neutralization of special elements used in a command ('command injection') in Microsoft...

CVE-2026-42895

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut

历史摘要 · 未重新核验 · GitHub Advisory

A flaw was found in the AWX GitHub webhook integration. When processing GitHub pull_request...

CVE-2026-12726

A flaw was found in the AWX GitHub webhook integration. When processing GitHub pull_request webhooks, the controller sto

历史摘要 · 未重新核验 · GitHub Advisory

A TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance...

CVE-2026-27878

A TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance to allocate an excessive

历史摘要 · 未重新核验 · GitHub Advisory

The WP Go Maps – Most Popular Map Plugin plugin for WordPress is vulnerable to authorization...

CVE-2026-12238

The WP Go Maps – Most Popular Map Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up t

历史摘要 · 未重新核验 · GitHub Advisory

Outerbase Studio: Stored XSS in Text Widget Leads to Authentication Token Exposure

CVE-2026-55650

## Summary A Stored Cross-Site Scripting (XSS) issue previously existed in the Text Widget in Board of Outerbase Studio

历史摘要 · 未重新核验 · GitHub Advisory

Langflow: Logout button does not clear session

CVE-2026-55423

### Summary The logout button does not clear the session. The previous user stays logged in unless another user explicit

历史摘要 · 未重新核验 · GitHub Advisory

py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()

CVE-2026-55206

### Summary PackInfo._read() uses an O(n^2) cumulative sum pattern where numstreams is read directly from the archive

历史摘要 · 未重新核验 · GitHub Advisory

py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size

CVE-2026-55195

py7zr's `Worker.decompress()` extracts archive entries without tracking total decompressed size. A crafted `.7z` file ca

历史摘要 · 未重新核验 · GitHub Advisory

Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms

CVE-2026-55187

## Summary The remediation shipped in mailpit v1.29.2 for [GHSA-mpf7-p9x7-96r3](https://github.com/axllent/mailpit/secu

历史摘要 · 未重新核验 · GitHub Advisory

Open Redirect Bypass in miniflux-v2

CVE-2026-55185

### Summary The URL restrictions in `miniflux-v2` can be bypassed by attackers, leading to an open redirect vulnerabilit

历史摘要 · 未重新核验 · GitHub Advisory

http4k: `ServerFilters.DigestAuth` / `DigestAuthProvider` defaulted to an always-true nonce verifier, disabling replay protection in default deployments

### Impact `ServerFilters.DigestAuth` and the underlying `DigestAuthProvider` both defaulted their `nonceVerifier` para

历史摘要 · 未重新核验 · GitHub Advisory

http4k: BasicCookieStorage` (renamed `InsecureCookieStorage`) did not enforce RFC 6265 cookie scoping; new `DefaultCookieStorage` is now the default

### Impact The previous `BasicCookieStorage` did not enforce RFC 6265 scoping rules around cookie domain, path, and `Se

历史摘要 · 未重新核验 · GitHub Advisory

http4k: `reverseProxy()` defaulted to substring (`Contains`) matching on `Host`; tightened to `Exact`

### Impact `reverseProxy()` and `reverseProxyRouting()` matched configured vhosts by substring on the `Host` header (`C

历史摘要 · 未重新核验 · GitHub Advisory

Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails

CVE-2026-54762

## Summary There is a medium severity vulnerability in Traefik's Kubernetes Ingress NGINX provider that causes affected

历史摘要 · 未重新核验 · GitHub Advisory

Allure Report: Stored XSS via unescaped ANSI helper in status message/trace rendering

CVE-2026-55847

## Summary The `ansi.js` Handlebars helper in allure-generator passes user-controlled `statusMessage` and `statusTrace`

历史摘要 · 未重新核验 · GitHub Advisory

Allure Report: Path Traversal in HTTP Server Allows Arbitrary File Read

CVE-2026-55846

## Summary The built-in HTTP server started by `allure serve` and `allure open` is vulnerable to path traversal. The se

历史摘要 · 未重新核验 · GitHub Advisory

dbt MCP Server: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens

CVE-2026-55837

## Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens ### Summary The local OAuth helper FastAPI server

历史摘要 · 未重新核验 · GitHub Advisory

go.qbee.io/transport: Symlink-chain path traversal in tar extraction (one level outside destination)

CVE-2026-55828

### Impact The go.qbee.io/transport library is affected by a symlink-chain path traversal vulnerability in its extractT

历史摘要 · 未重新核验 · GitHub Advisory

Craft Commerce: Coupon Code Brute-Force via Rate Limit Bypass

CVE-2026-55795

### Summary The CartController defines a RateLimiter behavior that is only activated when the 'number' POST/GET paramet

历史摘要 · 未重新核验 · GitHub Advisory

Craft Commerce: Partial Payment Amount Without Lower Bound Validation

### Summary The `Order::setPaymentAmount()` method accepts any float value without enforcing a minimum positive amount.

历史摘要 · 未重新核验 · GitHub Advisory