漏洞公告

Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token

@grpc/grpc-js: A malformed request can cause a server crash

@grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash

joi has an uncaught RangeError on deeply nested input through recursive `link()` schemas

OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri

@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects

Traefik has a StripPrefix Route-Level Auth Bypass via Path Normalization

Element Call reports full URLs of visited pages to analytics server

Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator

PDM: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing

free5GC UDR has improper `ueId` validation in EE subscription handlers that allows arbitrary identifier persistence

guzzlehttp/guzzle-services' XML Request Serialization Vulnerable to XML Injection via CDATA Terminator

guzzlehttp/psr7 has Host Confusion via Authority Reinterpretation

guzzlehttp/psr7 has CRLF Injection via URI Host Component

vLLM is vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` method

Spring Web Services: SSRF via unvalidated WS-Addressing reply destinations

Spring for GraphQL: Unsafe Deserialization

Spring for GraphQL: Annotation Detection Vulnerability

Spring Web Services: Inbound WS-Security allows RSA PKCS#1 v1.5 key transport by default

Spring for GraphQL: Cross-Site WebSocket Hijacking

Spring Boot: Predictable Temp Directory in Artemis Auto-configuration

Spring Web Services: Wss4jSecurityInterceptor disables WS-I BSP validation by default

Spring Web Services: WSS4J validation does not use configured replay cache