Grafana Operator: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName

CVE-2026-11769

We have released version 5.24.0 of the Grafana Operator. This patch includes a MODERATE severity security fix for a path

历史摘要 · 未重新核验 · GitHub Advisory

The User Admin Simplifier plugin for WordPress is vulnerable to Cross-Site Request Forgery in all...

CVE-2026-11775

The User Admin Simplifier plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and in

历史摘要 · 未重新核验 · GitHub Advisory

SQL injection in pgAdmin 4's named restore point endpoint (POST /browser/server/restore_point/...

CVE-2026-12050

SQL injection in pgAdmin 4's named restore point endpoint (POST /browser/server/restore_point/{gid}/{sid}). The user-sup

历史摘要 · 未重新核验 · GitHub Advisory

HTML injection in pgAdmin 4's cloud deployment module. The verify_credentials, deploy, regions,...

CVE-2026-12047

HTML injection in pgAdmin 4's cloud deployment module. The verify_credentials, deploy, regions, and update-server endpoi

历史摘要 · 未重新核验 · GitHub Advisory

Open redirect in pgAdmin 4's multi-factor authentication flow. The MFA validate and register...

CVE-2026-12049

Open redirect in pgAdmin 4's multi-factor authentication flow. The MFA validate and register endpoints honoured the user

历史摘要 · 未重新核验 · GitHub Advisory

PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation...

CVE-2026-56074

PraisonAI before 1.5.128 caches tool approval decisions by tool name only, not by invocation arguments, allowing subsequ

历史摘要 · 未重新核验 · GitHub Advisory

Hashgraph Guardian through 3.5.0, fixed in commit ba8c566, contains a stored cross-site scripting...

CVE-2026-22674

Hashgraph Guardian through 3.5.0, fixed in commit ba8c566, contains a stored cross-site scripting vulnerability that all

历史摘要 · 未重新核验 · GitHub Advisory

OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read vulnerability in the...

CVE-2026-56099

OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read vulnerability in the mpls_do_error function wi

历史摘要 · 未重新核验 · GitHub Advisory

setupBpmLogs follows symlink for bpm.log open and chown — container-to-host privilege escalation...

CVE-2026-47833

setupBpmLogs follows symlink for bpm.log open and chown — container-to-host privilege escalation via /etc/shadow. A comp

历史摘要 · 未重新核验 · GitHub Advisory

A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a...

CVE-2026-48937

A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a `GOAWAY` frame. This v

历史摘要 · 未重新核验 · GitHub Advisory

NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilfs_sb_is_valid() function fails to...

CVE-2026-55392

NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilfs_sb_is_valid() function fails to validate s_log_block_size

历史摘要 · 未重新核验 · GitHub Advisory

Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely. ...

CVE-2026-9692

Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely. The default session id

历史摘要 · 未重新核验 · GitHub Advisory

Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints

CVE-2026-55591

### Summary signalk-server versions up to and including 2.27.0 contain a Server-Side Request Forgery (SSRF) vulnerabilit

历史摘要 · 未重新核验 · GitHub Advisory

PHP JWT Library: RSA1_5 (RSAES-PKCS1-v1_5) decryption lacks implicit rejection, exposing a Bleichenbacher/Marvin padding oracle

### Impact `RSACrypt::decryptWithRSA15()` (used by the `RSA1_5` key-encryption algorithm) implements RSAES-PKCS1-v1_5 d

历史摘要 · 未重新核验 · GitHub Advisory

PHP JWT Framework: Chacha20Poly1305 key-encryption algorithm discards the Poly1305 authentication tag, performing no authentication on decryption

### Impact The experimental `Chacha20Poly1305` key-encryption algorithm generates the 16-byte Poly1305 authentication t

历史摘要 · 未重新核验 · GitHub Advisory

spomky-labs/otphp: Mass-assignment in Factory::loadFromProvisioningUri lets a hostile provisioning URI corrupt OTP state or leak an uncaught TypeError

## Summary `OTPHP\Factory::loadFromProvisioningUri()` parses an attacker-supplied `otpauth://` URI and forwards **every

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Internal/webchat command auth could inherit ownerAllowFrom wildcard state

CVE-2026-53854

### Summary Internal/webchat command auth could inherit ownerAllowFrom wildcard state. In affected versions, a sender o

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Focus command could miss controlScope enforcement

CVE-2026-53850

### Summary Focus command could miss controlScope enforcement. In affected versions, a caller able to trigger the focus

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: memory-wiki shared search could miss session visibility checks

CVE-2026-53844

### Summary memory-wiki shared search could miss session visibility checks. In affected versions, a caller able to sear

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Config recovery could restore openclaw.json with broad file permissions

CVE-2026-53856

### Summary Config recovery could restore openclaw.json with broad file permissions. In affected versions, a local reco

历史摘要 · 未重新核验 · GitHub Advisory