漏洞公告

JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases

@babel/core: Arbitrary File Read via sourceMappingURL Comment

@angular/service-worker: Request Credential & Cache Policy Stripping

@angular/common: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)

@angular/common: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache

@angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)

Symfony: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes

Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities

@angular/platform-server: URL Parser Differential leading to SSRF Allowlist Bypass

tmp: Type-confusion bypass of _assertPath allows path traversal via non-string prefix/postfix/template

ws: Memory exhaustion DoS from tiny fragments and data chunks

Angular Client Hydration DOM Clobbering & Response-Cache Poisoning

Subrion CMS vulnerable to Cross-site Scripting

Duplicate Advisory: utcp-gql SSRF: CVE-2026-44661 fix not applied to the GraphQL and WebSocket plugins

Microweber vulnerable to Path Traversal

OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties

MCP Toolbox for Databases has an Origin Validation Error

Duplicate Advisory: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName

Duplicate Advisory: OpenClaw: Mattermost handlers could fall open when channel type was missing

Duplicate Advisory: OpenClaw: Node pairing reconnection could confuse approval scope state

Duplicate Advisory: OpenClaw: QQBot streaming command could mutate config without explicit allowFrom

Duplicate Advisory: OpenClaw: Slack and Zalo webhook secrets could remain active after secrets.reload

Duplicate Advisory: OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion