markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations

CVE-2026-48988

### Summary A quadratic time complexity vulnerability exists in markdown-it's smartquotes rule (enabled via the `typogr

历史摘要 · 未重新核验 · GitHub Advisory

OpenTelemetry Core: Unbounded memory allocation in W3C Baggage propagation

CVE-2026-54285

## Overview `W3CBaggagePropagator.extract()` in `@opentelemetry/core` does not enforce size limits when parsing inbound

历史摘要 · 未重新核验 · GitHub Advisory

Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse

# CurlAsyncHTTPClient leaks per-request credentials on handle reuse ## Summary `CurlAsyncHTTPClient` pools and reuses

历史摘要 · 未重新核验 · GitHub Advisory

Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`

CVE-2026-48817

### Summary When dispatching a request, `HTTPEndpoint` selects the handler by lowercasing the HTTP method and looking i

历史摘要 · 未重新核验 · GitHub Advisory

UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`

CVE-2026-48125

### Summary A regular expression denial-of-service (ReDoS) vulnerability has been discovered in `ua-parser-js` when usi

历史摘要 · 未重新核验 · GitHub Advisory

protobufjs: Memory amplification from preserved unknown fields in binary decode

CVE-2026-54270

## Summary protobufjs 8.2.0 added support for preserving unknown fields encountered during binary decode. Affected vers

历史摘要 · 未重新核验 · GitHub Advisory

aiohttp: Incomplete websocket frame payloads bypass memory limits

CVE-2026-54274

### Summary If an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size

历史摘要 · 未重新核验 · GitHub Advisory

A content injection vulnerability was found in the ABRT post-create event handler scripts in...

CVE-2026-54231

A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script

历史摘要 · 未重新核验 · GitHub Advisory

The LWS Optimize – All-in-One Speed Booster & Cache Tools plugin for WordPress is vulnerable to...

CVE-2026-12089

The LWS Optimize – All-in-One Speed Booster & Cache Tools plugin for WordPress is vulnerable to Arbitrary File Read in v

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection...

CVE-2026-53838

OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nodes

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.7 contains a hostname validation vulnerability in retry endpoint checks...

CVE-2026-53839

OpenClaw before 2026.5.7 contains a hostname validation vulnerability in retry endpoint checks that allows matching host

历史摘要 · 未重新核验 · GitHub Advisory

Allegra exportReport Directory Traversal Information Disclosure Vulnerability. This vulnerability...

CVE-2026-11442

Allegra exportReport Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attacker

历史摘要 · 未重新核验 · GitHub Advisory

Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability. This...

CVE-2026-11443

Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote at

历史摘要 · 未重新核验 · GitHub Advisory

Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage...

CVE-2026-53867

Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remo

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.6 contains an improper access control vulnerability in Mattermost event...

CVE-2026-53837

OpenClaw before 2026.5.6 contains an improper access control vulnerability in Mattermost event handlers that fails to va

历史摘要 · 未重新核验 · GitHub Advisory

An authorization flaw in MISP’s object add/edit handling allowed an authenticated user with...

CVE-2026-54398

An authorization flaw in MISP’s object add/edit handling allowed an authenticated user with object editing permissions t

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.2 contains a credential exposure vulnerability in message.action...

CVE-2026-53827

OpenClaw before 2026.5.2 contains a credential exposure vulnerability in message.action forwarding that allows model-con

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.4.22 contains a webhook secret revocation bypass vulnerability allowing...

CVE-2026-53830

OpenClaw before 2026.4.22 contains a webhook secret revocation bypass vulnerability allowing callers with old Slack and

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.12 contains an exec denylist bypass vulnerability in the bundle MCP...

CVE-2026-53820

OpenClaw before 2026.5.12 contains an exec denylist bypass vulnerability in the bundle MCP loopback session-spawn path t

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.4.24 contains a token revocation vulnerability allowing callers with revoked...

CVE-2026-53824

OpenClaw before 2026.4.24 contains a token revocation vulnerability allowing callers with revoked slash tokens to contin

历史摘要 · 未重新核验 · GitHub Advisory