漏洞公告

TYPO3 CMS has Broken Access Control in its Form Framework

TYPO3 CMS has Broken Access Control in its Media Module

TYPO3 CMS has Insecure Deserialization via Core API

TYPO3 CMS has Broken Access Control in its File Abstraction Layer

TYPO3 CMS has Broken Access Control in Backend API

TYPO3 CMS: Broken Access Control in Media Module

TYPO3 CMS has Cross-Site Scripting in Indexed Search

TYPO3 HTML Sanitizer allows Cross-site Scripting

Mattermost doesn't restrict role_updated websocket event broadcasts to members of the affected team or channel

Mattermost doesn't require system-level permission when patching protected default system roles

Mattermost doesn't enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation

Mattermost doesn't sanitize the Remote Cluster API response on PATCH operations

Mattermost doesn't sanitize FileInfo.Name received from federated peers during shared channel file sync

Mattermost doesn't require role-management authorization when setting the scheme_admin flag on group syncable link and patch endpoints

Mattermost doesn't validate that a username returned during bot registration belongs to a bot account

ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to

ChromaDB has a code injection vulnerability

ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection

Tornado has out-of-bounds memory access via C extension

nebula-mesh: POST /api/v1/hosts/{id}/mobile-bundle response lacks Cache-Control: no-store

pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams

pypdf: Possible large memory usage for large offsets for layout mode text

gorest InMemorySecret2FA race condition allows process crash via concurrent map access (CWE-362)