OSV.dev · 实时热榜

Affected packages: Ubuntu:22.04:LTS/openssl、Ubuntu:24.04:LTS/edk2、Ubuntu:24.04:LTS/openssl、Ubuntu:26.04:LTS/edk2、Ubuntu:26.04:LTS/openssl、... 7 more Attributes: No fix available

Grav CMS before 2.0.16 Path Traversal via media_directory Affected packages: github.com/getgrav/grav Attributes: Fix available、Severity - 7.1 (High)

Grav CMS before 2.0.16 Information Disclosure via Twig Sandbox Bypass Affected packages: github.com/getgrav/grav Attributes: Fix available、Severity - 7.1 (High)

Grav CMS before 2.0.16 Timing Attack via verifyNonce Affected packages: github.com/getgrav/grav Attributes: Fix available、Severity - 6.3 (Medium)

Grav CMS before 2.0.16 Origin Validation Bypass via Referer Affected packages: github.com/getgrav/grav Attributes: Fix available、Severity - 9.3 (Critical)

Rocket.Chat Missing DDP Rate Limit on the sendForgotPasswordEmail Meteor Method Affected packages: github.com/rocketchat/rocket.chat Attributes: Fix available、Severity - 6.9 (Medium)

Grav before 2.0.16 Information Disclosure via offsetGet Affected packages: github.com/getgrav/grav Attributes: Fix available、Severity - 8.7 (High)

Grav before 2.0.16 Information Disclosure via Twig Sandbox Affected packages: github.com/getgrav/grav Attributes: Fix available、Severity - 8.7 (High)

GitPython before 3.1.59 Local File Content Disclosure via .gitmodules Affected packages: github.com/gitpython-developers/gitpython Attributes: Fix available、Severity - 8.6 (High)

GitPython before 3.1.59 Remote Code Execution via Config Injection Affected packages: github.com/gitpython-developers/gitpython Attributes: Fix available、Severity - 9.3 (Critical)

GitPython before 3.1.59 Path Traversal via separate-git-dir Affected packages: github.com/gitpython-developers/gitpython Attributes: Fix available、Severity - 8.7 (High)

GitPython before 3.1.59 Arbitrary File Read via Repo.blame() Affected packages: github.com/gitpython-developers/gitpython Attributes: Fix available、Severity - 7.1 (High)

GitPython before 3.1.59 Arbitrary File Read via TagReference.create Affected packages: github.com/gitpython-developers/gitpython Attributes: Fix available、Severity - 7.1 (High)

NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary Affected packages: github.com/nltk/nltk Attributes: Fix available、Severity - 8.5 (High)

NLTK before 3.10.3 Entity Expansion DoS via ElementTree Affected packages: github.com/nltk/nltk Attributes: Fix available、Severity - 8.7 (High)

NLTK before 3.10.3 SSRF Protection Bypass via Proxy Affected packages: github.com/nltk/nltk Attributes: Fix available、Severity - 8.7 (High)

NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization Affected packages: github.com/nltk/nltk Attributes: Fix available、Severity - 9.4 (Critical)

OAuth token exchange grants repository scopes for organizations the principal cannot access Affected packages: github.com/hexpm/hexpm Attributes: Fix available、Severity - 8.3 (High)

tokio-postgres: Panic on a `DataRow` with fewer fields than columns allows denial of service Affected packages: crates.io/tokio-postgres Attributes: Fix available、Severity - 6.9 (Medium)

Explicit organization scopes survive token refresh after membership ends Affected packages: github.com/hexpm/hexpm Attributes: Fix available、Severity - 2.3 (Low)

django CMS: Plugin move endpoint allows cyclic reparenting (DoS) Affected packages: PyPI/django-cms Attributes: Fix available、Severity - 7.1 (High)

django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning) Affected packages: PyPI/django-cms Attributes: Fix available、Severity - 4.8 (Medium)

netfoil vulnerable to improper handling of untrusted DoH response data Affected packages: Go/github.com/tinfoil-factory/netfoil Attributes: Fix available、Severity - 2.7 (Low)

Affected packages: Echo/gst-plugins-good1.0 Attributes: No fix available

Affected packages: Echo/gst-plugins-good1.0 Attributes: No fix available

3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation Affected packages: Go/github.com/mhsanaei/3x-ui/v2、Go/github.com/mhsanaei/3x-ui/v3 Attributes: Fix available、Severity - 7.2 (High)

Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key Affected packages: Go/github.com/gorilla/websocket Attributes: Fix available、Severity - 6.9 (Medium)

mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server Affected packages: PyPI/mcp-contextforge-gateway Attributes: Fix available

Sakai Profile Image Deletion has an IDOR Affected packages: Maven/org.sakaiproject.profile2:profile2-api、Maven/org.sakaiproject.profile2:profile2-impl Attributes: Fix available、Severity - 6.5 (Medium)

Sakai Conversations has a Stored XSS Issue Affected packages: Maven/org.sakaiproject.conversations:sakai-conversations-impl、Maven/org.sakaiproject.kernel:sakai-kernel-impl、Maven/org.sakaiproject.rubrics:rubrics-impl Attributes: No fix available、Severity - 8.7 (High)

postgres-protocol: Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service Affected packages: crates.io/postgres-protocol Attributes: Fix available、Severity - 8.7 (High)

postgres-protocol: Panic decoding a malformed `hstore` value allows denial of service Affected packages: crates.io/postgres-protocol Attributes: Fix available、Severity - 6.9 (Medium)

vibeio-http has a DoS vulnerability in HTTP/1.x chunked encoding parser triggered by maliciously crafted chunk lengths Affected packages: crates.io/vibeio-http Attributes: Fix available、Severity - 6.9 (Medium)

Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint Affected packages: Go/github.com/cloudreve/Cloudreve/v4 Attributes: No fix available、Severity - 5.3 (Medium)

Cloudreve's remote download file paths can escape the selected destination directory Affected packages: Go/github.com/cloudreve/Cloudreve/v4 Attributes: No fix available、Severity - 5.5 (Medium)

Affected packages: Debian:11/ntfs-3g、Debian:12/ntfs-3g、Debian:13/ntfs-3g、Debian:14/ntfs-3g Attributes: Fix available

Affected packages: Debian:11/ntfs-3g、Debian:12/ntfs-3g、Debian:13/ntfs-3g、Debian:14/ntfs-3g Attributes: Fix available

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian... Affected packages: Julia/xapian_jll Attributes: No fix available、Severity - 4.4 (Medium)

CVE-2026-44168 in mariadb - Patched by Root Affected packages: Root:Debian:13/mariadb、Root:Debian:13/rootio-mariadb Attributes: Fix available

CVE-2026-44169 in mariadb - Patched by Root Affected packages: Root:Debian:13/mariadb、Root:Debian:13/rootio-mariadb Attributes: Fix available

CVE-2026-44170 in mariadb - Patched by Root Affected packages: Root:Debian:13/mariadb、Root:Debian:13/rootio-mariadb Attributes: Fix available

CVE-2026-44171 in mariadb - Patched by Root Affected packages: Root:Debian:13/mariadb、Root:Debian:13/rootio-mariadb Attributes: Fix available

Important: python3.12 security update Affected packages: Rocky Linux:10/python3.12 Attributes: Fix available、Severity - 7.3 (High)

Malicious code in @medisend/auth (npm) Affected packages: npm/@medisend/auth Attributes: No fix available

Malicious code in @medisend/core (npm) Affected packages: npm/@medisend/core Attributes: No fix available

Malicious code in @medisend/shared (npm) Affected packages: npm/@medisend/shared Attributes: No fix available

Malicious code in @medisend/webview-bridge (npm) Affected packages: npm/@medisend/webview-bridge Attributes: No fix available

Malicious code in auth-otp (npm) Affected packages: npm/auth-otp Attributes: No fix available

Malicious code in babel-polyfill-plugin-corejs2 (npm) Affected packages: npm/babel-polyfill-plugin-corejs2 Attributes: No fix available

Malicious code in chai-as-mno (npm) Affected packages: npm/chai-as-mno Attributes: No fix available