hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression

During message encoding, `hickory-proto`'s `BinEncoder` stores pointers to labels that are candidates for name compressi

历史摘要 · 未重新核验 · GitHub Advisory

Daptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change

### Summary A session invalidation vulnerability exists in daptin's authentication system where JSON Web Tokens (JWTs)

历史摘要 · 未重新核验 · GitHub Advisory

Kubetail has a Cross-Site WebSocket Hijacking issue that allows attacker to read Kubernetes logs from authenticated users

CVE-2026-44514

### Summary Kubetail's dashboard exposes WebSocket endpoints that did not adequately validate the Origin header on conn

历史摘要 · 未重新核验 · GitHub Advisory

go-ipld-prime's DAG-CBOR and DAG-JSON decoders have unbounded recursion depth

CVE-2026-42328

The DAG-CBOR and DAG-JSON decoders recurse on each nested map or list without a depth limit. A payload containing deeply

历史摘要 · 未重新核验 · GitHub Advisory

CSS Parser: Improper Certificate Validation allows MITM injection of remote CSS content

CVE-2026-44312

### Summary The CSS Parser gem does not validate HTTPS connections, allowing a Man-in-the-Middle (MITM) attacker to inj

历史摘要 · 未重新核验 · GitHub Advisory

Free5GC AMF Bypasses UE Security Capabilities on NGAP PathSwitchRequest

CVE-2026-42081

### Summary The AMF in Free5GC v4.2.1 does not verify the UE Security Capabilities received in NGAP PathSwitchRequest me

历史摘要 · 未重新核验 · GitHub Advisory

Gotenberg allows Chromium URL conversion routes to read arbitrary files under /tmp via file:// scheme

CVE-2026-42597

## Summary The `/forms/chromium/convert/url` and `/forms/chromium/screenshot/url` routes accept `url=file:///tmp/...` f

历史摘要 · 未重新核验 · GitHub Advisory

Samsung Print Service Plugin for Android is potentially vulnerable to information disclosure when...

CVE-2026-3291

Samsung Print Service Plugin for Android is potentially vulnerable to information disclosure when using an outdated vers

历史摘要 · 未重新核验 · GitHub Advisory

Goteberg has arbitrary PDF read via stampExpression and watermarkExpression in merge, split, and convert routes

CVE-2026-42593

## Summary Six conversion routes (`pdfengines/merge`, `pdfengines/split`, `libreoffice/convert`, `chromium/convert/url`

历史摘要 · 未重新核验 · GitHub Advisory

Gotenberg's DNS rebinding bypasses SSRF validation on Chromium URL conversion routes

CVE-2026-42592

## Summary `FilterOutboundURL` resolves the hostname, checks the resolved IPs against the private-address deny-list, an

历史摘要 · 未重新核验 · GitHub Advisory

Netty Redis Codec Encoder has a CRLF Injection Issue

CVE-2026-42586

# Security Vulnerability Report: CRLF Injection in Netty Redis Codec Encoder ## 1. Vulnerability Summary | Field | Val

历史摘要 · 未重新核验 · GitHub Advisory

Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-Encoding

CVE-2026-42585

### Summary Netty incorrectly parses malformed Transfer-Encoding, enabling request smuggling attacks. ### Details Netty

历史摘要 · 未重新核验 · GitHub Advisory

Netty HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization

CVE-2026-42581

# NETTY HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization | Field | Value | |-----------|-------| | Librar

历史摘要 · 未重新核验 · GitHub Advisory

Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsing

CVE-2026-42580

### Summary Netty's chunk size parser silently overflows int, enabling request smuggling attacks. ### Details io.netty.

历史摘要 · 未重新核验 · GitHub Advisory

wasmtime has a panic when allocating a table exceeding the size of the host's address space

CVE-2026-44216

### Impact Wasmtime's allocation logic for a WebAssembly table contained checked arithmetic which panicked on overflow.

历史摘要 · 未重新核验 · GitHub Advisory

OpenSearch Security plugin: DLS not applied on documents linked by has_child or has_parent relation

### Description A flaw was identified in the OpenSearch Security plugin's document-level security (DLS) implementation.

历史摘要 · 未重新核验 · GitHub Advisory

Spring Cloud AWS missing SNS message signature verification allows spoofing of HTTP/HTTPS endpoint notifications

CVE-2026-44308

### Impact Applications using Spring Cloud AWS SNS HTTP/HTTPS endpoint support (@NotificationMessageMapping, @Notif

历史摘要 · 未重新核验 · GitHub Advisory

Vercel: Non-interactive mode includes CLI arguments in suggested command output

CVE-2026-44479

# Summary When the Vercel CLI runs in non-interactive mode (`--non-interactive` or auto-detected AI agent), commands th

历史摘要 · 未重新核验 · GitHub Advisory

Weblate vulnerable to XSS via crafted Markdown

CVE-2026-44264

### Impact The Markdown renderer used in user comments and other user-provided content didn't properly sanitize some att

历史摘要 · 未重新核验 · GitHub Advisory

Weblate Vulnerable to Private Translation Enumeration via Screenshot API

CVE-2026-44263

### Impact The screenshots, tasks, and component link API allowed for the enumeration of translations in a project inac

历史摘要 · 未重新核验 · GitHub Advisory