#severity:medium

共收录 5477 条相关情报。

← 返回所有主题
安全公告2026-09-28 发布INFO

jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution (SSRF) still present in InetAddress deserialization

CVE-2026-77310

### Summary CVE-2026-54514 (GHSA-hgj6-7826-r7m5) fixed an eager-DNS-resolution / SSRF issue in jackson-databind's deseri

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches

CVE-2026-101914

### Impact When using RBAC to apply authentication rules, the exact path (method name) matcher applies a prefix match in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client...

CVE-2026-96740

A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client properties from the Console cu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the...

CVE-2026-101102

A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the com

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the...

CVE-2026-101101

A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the...

CVE-2026-101100

A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsM

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown...

CVE-2026-101082

A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloade

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by...

CVE-2026-101098

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the funct

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

scim-patch: Mutation of Inherited Built-in Method Objects

CVE-2026-61834

## Summary Incomplete Prototype Pollution Fix Allows Mutation of Inherited Built-in Method Objects `scim-patch` blocks

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted...

CVE-2026-100895

A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arc_pa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A vulnerability was found in athlon1600 youtube-downloader up to 4.0.1. Affected by this...

CVE-2026-100901

A vulnerability was found in athlon1600 youtube-downloader up to 4.0.1. Affected by this vulnerability is the function s

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A security vulnerability has been detected in fuzui StudentInfo up to...

CVE-2026-100897

A security vulnerability has been detected in fuzui StudentInfo up to fcc42a639ec7cef620651bfd0f07ebb660529e3f. The impa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A vulnerability was found in aligungr UERANSIM up to 3.3.0. This affects the function...

CVE-2026-100892

A vulnerability was found in aligungr UERANSIM up to 3.3.0. This affects the function ULInformationTransfer of the file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this...

CVE-2026-100891

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this...

CVE-2026-100890

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function op

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A vulnerability was determined in Privoce VoceChat Server up to 0.5.36. This vulnerability...

CVE-2026-100893

A vulnerability was determined in Privoce VoceChat Server up to 0.5.36. This vulnerability affects the function open_gra

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the...

CVE-2026-100888

A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkim_canon_sel

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the...

CVE-2026-100889

A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the function dkim_qp_decode of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-28 发布INFO

A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of...

CVE-2026-100885

A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webku

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP client to validate user-configurable...

CVE-2026-101087

Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP client to validate user-configurable notification and DDNS web

历史摘要 · 未重新核验 · GitHub Advisory