SiYuan: The reference filter for getRefIDs checks visibility but not the password tier, disclosing that password-protected documents reference a given block

CVE-2026-73606

### Summary `/api/block/getRefIDs` filters its results for reader roles through a helper that checks only the visibilit

历史摘要 · 未重新核验 · GitHub Advisory

SiYuan: getBookmarkLabels returns every bookmark label in the workspace to anonymous readers, with no publish-access filtering

CVE-2026-73609

### Summary `/api/attr/getBookmarkLabels` is registered with `CheckAuth` only and applies no filtering of any kind. It

历史摘要 · 未重新核验 · GitHub Advisory

SiYuan: getUniqueFilename passes an unvalidated client-supplied path to the filesystem, giving anonymous readers an existence oracle over the entire host filesystem

CVE-2026-73605

### Summary `/api/file/getUniqueFilename` takes a path from the request body and passes it to a filesystem existence ch

历史摘要 · 未重新核验 · GitHub Advisory

SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check

CVE-2026-73607

### Summary `/api/storage/getOutlineStorage` is registered with `CheckAuth` only and performs no authorization of any k

历史摘要 · 未重新核验 · GitHub Advisory

vm2: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checks

CVE-2026-92952

## Summary vm2 current head (`v3.11.5`, commit `7a1f5100b96f48d34e0fe104ab37c0acc5944f92`) still exposes registered Nod

历史摘要 · 未重新核验 · GitHub Advisory

vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor

CVE-2026-92949

### Summary Untrusted JavaScript running inside `new VM().run()` / `new NodeVM().run()` can bypass `vm.freeze()` / `vm.r

历史摘要 · 未重新核验 · GitHub Advisory

vm2: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted

CVE-2026-92945

## Summary `isPathAllowedForModule` decides whether a resolved path belongs to an allowlisted external module using a r

历史摘要 · 未重新核验 · GitHub Advisory

JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)

CVE-2026-102830

## Description A language pack ships a `Plural-Forms` header saying how the language counts, for example `nplurals=2; p

历史摘要 · 未重新核验 · GitHub Advisory

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

CVE-2026-102904

JupyterLab's PyPI extension manager runs `python -m pip uninstall` with the extension name taken from the request body.

历史摘要 · 未重新核验 · GitHub Advisory

devalue: Residual sparse-array CPU amplification in uneval

`uneval` performs synchronous work proportional to a sparse array's declared length. An application that passes attacker

历史摘要 · 未重新核验 · GitHub Advisory

There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission...

CVE-2026-86556

There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can explo

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This...

CVE-2026-102908

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted...

CVE-2026-102909

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function

历史摘要 · 未重新核验 · GitHub Advisory

Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who...

CVE-2026-78229

Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux sys

历史摘要 · 未重新核验 · GitHub Advisory

Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log...

CVE-2026-81310

Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system whe

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was identified in HKUDS AnyTool 0.1.0. Affected is the function subprocess.run of...

CVE-2026-102874

A vulnerability was identified in HKUDS AnyTool 0.1.0. Affected is the function subprocess.run of the file anytool/local

历史摘要 · 未重新核验 · GitHub Advisory

AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime...

CVE-2026-103057

AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpo

历史摘要 · 未重新核验 · GitHub Advisory

A security vulnerability has been detected in gedelumbung HospitalManagement up to...

CVE-2026-102845

A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf7

历史摘要 · 未重新核验 · GitHub Advisory

AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API...

CVE-2026-103053

AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOC_DEV_MO

历史摘要 · 未重新核验 · GitHub Advisory

A flaw has been found in Nothings stb up to 1.16. This affects the function stbi_write_png_to_mem...

CVE-2026-102805

A flaw has been found in Nothings stb up to 1.16. This affects the function stbi_write_png_to_mem/stbi_write_jpg_core/st

历史摘要 · 未重新核验 · GitHub Advisory