A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The...

CVE-2026-102804

A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The impacted element is the

历史摘要 · 未重新核验 · GitHub Advisory

An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an...

CVE-2026-86105

An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privil

历史摘要 · 未重新核验 · GitHub Advisory

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition...

CVE-2026-71974

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition() that fails to valida

历史摘要 · 未重新核验 · GitHub Advisory

An attacker can construct a request that, if issued by another application user, will cause...

CVE-2026-71189

An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by

历史摘要 · 未重新核验 · GitHub Advisory

U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the...

CVE-2026-71972

U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the video_display_rle8_bitmap function in dr

历史摘要 · 未重新核验 · GitHub Advisory

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table...

CVE-2026-71973

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table() function when alloca

历史摘要 · 未重新核验 · GitHub Advisory

fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets

CVE-2026-86472

### Impact `fast-uri` folds the host to lowercase before it percent-decodes the host, so a percent-encoded uppercase un

历史摘要 · 未重新核验 · GitHub Advisory

fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization

CVE-2026-86818

### Impact `fast-uri`'s `mailto` scheme parser compares each query field name to the reserved names (`to`, `subject`, `

历史摘要 · 未重新核验 · GitHub Advisory

ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside...

CVE-2026-101912

### Summary `isInSubnet()` and `isHostInSubnet()` accept an address of either family and compare masked binary strings

历史摘要 · 未重新核验 · GitHub Advisory

ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process

CVE-2026-101911

### Summary `new Address6()` and `Address6.isValid()` place no bound on the length of the string they parse. When the s

历史摘要 · 未重新核验 · GitHub Advisory

moment vulnerable to Path Traversal via crafted non-string locale name

CVE-2026-17495

### Impact moment before 2.31.0 is vulnerable to path traversal in `moment.locale()`. When an application passes a non-

历史摘要 · 未重新核验 · GitHub Advisory

brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service

CVE-2026-102277

### Summary Expanding `{a},b}`-shaped input takes time quadratic in the number of literal `}` characters, blocking the

历史摘要 · 未重新核验 · GitHub Advisory

Nodemailer: Quoted local-part can produce malformed envelope recipient through RFC 5322 comment parsing

## Summary Nodemailer's address parser can produce an unexpected recipient address when an RFC 5322 comment follows the

历史摘要 · 未重新核验 · GitHub Advisory

PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header

CVE-2026-102265

## Package pyjwt (PyPI) ## Affected versions tested & verified on: 2.13.0. Every version whose `PyJWS._load()` transl

历史摘要 · 未重新核验 · GitHub Advisory

PyJWT: Non-canonical signature segments enable raw-token revocation bypass

CVE-2026-102269

## Summary PyJWT 2.13.0 accepts compact JWS signature segments containing characters that are not in the Base64URL alph

历史摘要 · 未重新核验 · GitHub Advisory

PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)

CVE-2026-101917

Summary CVE-2026-48524 (GHSA-fhv5-28vv-h8m8, "PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid v

历史摘要 · 未重新核验 · GitHub Advisory

adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content

### Summary A ZIP file can contain two entries with the identical name. adm-zip keeps both in its internal entry list,

历史摘要 · 未重新核验 · GitHub Advisory

adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path

### Summary adm-zip enforces a `maxOutputLength` guard against decompression bombs on its synchronous `getData()` path,

历史摘要 · 未重新核验 · GitHub Advisory

Ammonia: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-102342

The following SVG will produce a link with a `javascript` scheme. If the user clicks this link, they will run it. ```sv

历史摘要 · 未重新核验 · GitHub Advisory

Nodemailer: Nested structured recipient arrays bypass the parser depth limit and cause stack exhaustion DoS

## Submission metadata | Field | Value | |---|---| | Ecosystem | npm | | Package | `nodemailer` | | Repository | https:

历史摘要 · 未重新核验 · GitHub Advisory