共收录 5506 条相关情报。
← 返回所有主题CVE-2026-116685
### Summary In affected versions, the SDK's Streamable HTTP and SSE client transports followed HTTP redirects to any hos
CVE-2026-116686
### Summary In affected versions, when a connected MCP server declared an `outputSchema` for a tool, the SDK's client va
CVE-2026-116679
### Impact When legacy mode is enabled and `session.implicit_hosting` is enabled, the legacy WebRTC data channel incorr
CVE-2026-109932
### Impact undici's WebSocket client (including Node.js's bundled `globalThis.WebSocket`) can be driven to exhaust proc
CVE-2026-87029
## Impact undici's `decompress` interceptor forwards decompressed response data to the downstream handler from zlib str
CVE-2026-110816
## Summary `qs.stringify(obj, { arrayFormat: 'comma' })` throws an uncaught `TypeError: Cannot convert object to primit
CVE-2026-88781
Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an
CVE-2026-116620
A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStri
CVE-2024-58399
llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read
CVE-2026-116623
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of t
CVE-2026-116841
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_f
CVE-2026-116844
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only t
CVE-2026-116842
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup
CVE-2026-116605
A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function
CVE-2026-116840
llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-
CVE-2025-71439
llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows a
CVE-2026-116829
llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers
CVE-2026-116824
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that allo
CVE-2026-116828
YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but placed
CVE-2026-116820
YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers t