OSV.dev · 实时热榜

Affected packages: Alpaquita:23/linux-lts、Alpaquita:25/linux-lts、Alpaquita:stream/linux-lts Attributes: Fix available、Severity - 9.8 (Critical)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab Affected packages: Bitnami/gitlab Attributes: Fix available、Severity - 8.5 (High)

Affected packages: Debian:11/u-boot、Debian:12/u-boot、Debian:13/u-boot、Debian:14/u-boot Attributes: No fix available

Affected packages: Debian:11/composer、Debian:12/composer、Debian:13/composer、Debian:14/composer Attributes: No fix available

Affected packages: Debian:12/linux、Debian:13/linux、Debian:14/linux Attributes: Fix available

gix-packetline: reachable panic on empty side-band packet (pre-auth network DoS) Affected packages: crates.io/gix-packetline Attributes: Fix available、Severity - 6.5 (Medium)

Vikunja has an incomplete fix for CVE-2026-35595: Write-only user can detach shared project from parent hierarchy via parent_project_id=0 Affected packages: Go/code.vikunja.io/api Attributes: Fix available、Severity - 4.3 (Medium)

Vikunja vulnerable to authenticated cross-tenant kanban-bucket relocation via `project_view_id` mass-assignment Affected packages: Go/code.vikunja.io/api Attributes: Fix available、Severity - 5.0 (Medium)

Incus has a project restriction bypass for custom volume copy across projects Affected packages: Go/github.com/lxc/incus、Go/github.com/lxc/incus/v6、Go/github.com/lxc/incus/v7 Attributes: Fix available、Severity - 7.7 (High)

Yamcs vulnerable to Remote Code Execution via instance-template argument YAML injection (createInstance) Affected packages: Maven/org.yamcs:yamcs-core Attributes: Fix available、Severity - 9.8 (Critical)

AIIR verification and policy gates could report success without enforcing the control (fail-open) Affected packages: PyPI/aiir Attributes: Fix available、Severity - 6.9 (Medium)

Yamcs has DOM XSS in Extension Routing Affected packages: Maven/org.yamcs:yamcs-core Attributes: Fix available、Severity - 4.3 (Medium)

Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation Affected packages: Packagist/pimcore/studio-backend-bundle Attributes: Fix available、Severity - 7.1 (High)

Snipe-IT has an authorization bypass on print inventory page Affected packages: Packagist/snipe/snipe-it Attributes: Fix available、Severity - 4.3 (Medium)

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA Affected packages: Go/github.com/free5gc/ausf Attributes: Fix available、Severity - 3.7 (Low)

Yamcs's WebSocket subscription handlers omit the privilege checks their REST siblings enforce Affected packages: Maven/org.yamcs:yamcs-core Attributes: Fix available、Severity - 6.5 (Medium)

MariaDB has possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets Affected packages: npm/mariadb Attributes: Fix available、Severity - 6.5 (Medium)

MariaDB has cleartext password disclosure to a MITM on the initial-handshake Affected packages: Maven/org.mariadb.jdbc:mariadb-java-client Attributes: Fix available、Severity - 5.9 (Medium)

Fortigate syslog message parser can be exploited to modify or delete fields from the original message Affected packages: Maven/org.graylog2:graylog2-server Attributes: Fix available、Severity - 7.5 (High)

arc has unauthenticated cluster node admission when `cluster.shared_secret` is unset Affected packages: Go/github.com/basekick-labs/arc Attributes: Fix available、Severity - 6.9 (Medium)

Graylog Server: System Catalog titles endpoint can be used to retrieve values of protected database fields Affected packages: Maven/org.graylog2:graylog2-server Attributes: Fix available、Severity - 5.0 (Medium)

Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL Affected packages: Go/github.com/maximhq/bifrost/core Attributes: Fix available、Severity - 8.7 (High)

Protego has exponential backtracking ReDoS in robots.txt URL wildcard matching Affected packages: PyPI/protego Attributes: Fix available、Severity - 7.1 (High)

Malicious code in qbo-ui-services (npm) Affected packages: npm/qbo-ui-services Attributes: No fix available

Malicious code in sentrykit (npm) Affected packages: npm/sentrykit Attributes: No fix available

Malicious code in ckeditor5-ckbox (npm) Affected packages: npm/ckeditor5-ckbox Attributes: No fix available

Malicious code in flask-header-guard (PyPI) Affected packages: PyPI/flask-header-guard Attributes: No fix available

Affected packages: MinimOS/plural-agent-harness Attributes: Fix available

Affected packages: MinimOS/pluralsh-deployment-operator Attributes: Fix available

Affected packages: MinimOS/cert-manager-cainjector-fips-1.17、MinimOS/cert-manager-controller-fips-1.17、MinimOS/cert-manager-fips-1.17、MinimOS/cert-manager-startupapicheck-fips-1.17、MinimOS/cert-manager-webhook-fips-1.17 Attributes: No fix available

Affected packages: MinimOS/coredns-fips-1.13、MinimOS/kuma-coredns-fips-1.13 Attributes: No fix available

Affected packages: MinimOS/argocd-image-updater-fips-0 Attributes: No fix available

Affected packages: MinimOS/miniconda3 Attributes: Fix available

Affected packages: MinimOS/litellm-1.82 Attributes: No fix available

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Affected packages: Red Hat:hummingbird:1/ruby3.3、Red Hat:hummingbird:1/ruby3.3-default-gems Attributes: Fix available、Severity - 3.7 (Low)

Affected packages: Alpaquita:23/linux-lts、Alpaquita:25/linux-lts、Alpaquita:stream/linux-lts Attributes: Fix available、Severity - 9.8 (Critical)

Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete Affected packages: Bitnami/tomcat Attributes: Fix available、Severity - 9.8 (Critical)

Affected packages: Debian:11/u-boot、Debian:12/u-boot、Debian:13/u-boot、Debian:14/u-boot Attributes: No fix available

ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption Affected packages: Go/oras.land/oras Attributes: Fix available、Severity - 2.0 (Low)

Weblate has IDOR in GroupViewSet that allows authenticated project manager to gain unauthorized read access to any private project Affected packages: PyPI/weblate Attributes: Fix available、Severity - 8.1 (High)

free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI Affected packages: Go/github.com/free5gc/ausf Attributes: No fix available、Severity - 7.5 (High)

Snipe-IT vulnerable to cross-company asset maintenance re-parenting via API update Affected packages: Packagist/snipe/snipe-it Attributes: Fix available、Severity - 7.7 (High)

Vikunja has cross-tenant IDOR in kanban move-task endpoint via unauthorized body task_id Affected packages: Go/code.vikunja.io/api Attributes: Fix available、Severity - 7.1 (High)

Pimcore: SQL Injection via Column Name in DateFilter allows authenticated user to extract arbitrary database data including admin password hashes Affected packages: Packagist/pimcore/studio-backend-bundle Attributes: Fix available、Severity - 7.7 (High)

Hatchet allows cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe Affected packages: Go/github.com/hatchet-dev/hatchet Attributes: Fix available、Severity - 6.4 (Medium)

Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities Affected packages: Maven/org.yamcs:yamcs-core Attributes: Fix available、Severity - 8.8 (High)

Yamcs has Unauthenticated Directory Traversal Affected packages: Maven/org.yamcs:yamcs-core Attributes: Fix available、Severity - 7.5 (High)

Yamcs vulnerable to authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`) Affected packages: Maven/org.yamcs:yamcs-core Attributes: Fix available、Severity - 9.9 (Critical)

Vikunja has a project duplication bypasses write-permission check on the target parent project Affected packages: Go/code.vikunja.io/api Attributes: Fix available、Severity - 5.3 (Medium)

RestrictedPython guard hooks can be shadowed via positional-only arguments Affected packages: PyPI/restrictedpython Attributes: Fix available、Severity - 8.3 (High)