—— |
| 未审查 |
| 2026-09-04 02:31 |
| 2026-09-04 02:31 |
| GHSA-HQQ8-9486-V237 CVE-2026-83961 | 无摘要 | 高危 | —— | 未审查 | 2026-09-04 02:31 | 2026-09-04 02:31 |
| GHSA-CC88-9PXF-J2WV CVE-2026-71963 | 无摘要 | 高危 | —— | 未审查 | 2026-09-04 02:31 | 2026-09-04 02:31 |
| GHSA-M45V-V2RR-G2HR CVE-2026-15203 | 无摘要 | 严重 | —— | 未审查 | 2026-09-04 02:31 | 2026-09-04 02:31 |
| GHSA-9V6J-CR5F-P2GX CVE-2026-78237 | 无摘要 | 高危 | —— | 未审查 | 2026-09-04 02:31 | 2026-09-04 02:31 |
| GHSA-733C-6W54-GRPX CVE-2026-78236 | 无摘要 | 高危 | —— | 未审查 | 2026-09-04 02:31 | 2026-09-04 02:31 |
| GHSA-2W86-XFRC-G85R CVE-2026-71867 | Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator | 严重 | npmorval | 已审查 | 2026-09-04 02:26 | 2026-09-04 02:26 |
| GHSA-3575-W9FC-C2J6 CVE-2026-71868 | Orval: Import-time RCE via enum-typed default -> zod module-level template literal | 严重 | npmorval | 已审查 | 2026-09-04 02:20 | 2026-09-04 02:20 |
| GHSA-653Q-5476-X79G CVE-2026-71865 | Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli | 严重 | npmorval | 已审查 | 2026-09-04 02:18 | 2026-09-04 02:18 |
| GHSA-6437-GXHQ-PQV8 CVE-2026-71864 | Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client | 严重 | npmorval | 已审查 | 2026-09-04 02:08 | 2026-09-04 02:08 |
| GHSA-JCVH-XF52-2CWM CVE-2026-73232 | ffuf denial of service (OOM) via HTTP response decompression bomb | 高危 | Gogithub.com/ffuf/ffuf+1 | 已审查 | 2026-09-04 02:02 | 2026-09-04 02:02 |
| GHSA-8Q3C-RJR9-XXRP CVE-2026-61625 | VictoriaMetrics vmrestore: Path traversal via crafted backup part names escapes restore root | 中危 | Gogithub.com/VictoriaMetrics/VictoriaMetrics | 已审查 | 2026-09-04 01:49 | 2026-09-04 01:49 |
| GHSA-M7FP-H3P4-HR49 CVE-2026-61556 | LiquidJS has an infinite loop vulnerability in its `strip_html` filter | 高危 | npmliquidjs | 已审查 | 2026-09-04 01:45 | 2026-09-04 01:45 |
| GHSA-H6CJ-26G5-67FV CVE-2026-75602 | OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool | 中危 | Gogithub.com/OpenListTeam/OpenList | 已审查 | 2026-09-04 01:37 | 2026-09-04 01:37 |
| GHSA-W8WF-3QVJ-6XQF | OpenClaw Feishu permission tools could ignore per-account disablement | 高危 | npm@openclaw/feishu | 已审查 | 2026-09-04 01:33 | 2026-09-04 01:33 |
| GHSA-2Q7J-2VHX-56G8 | OpenClaw Feishu tools could ignore per-account disablement | 高危 | npm@openclaw/feishu | 已审查 | 2026-09-04 01:30 | 2026-09-04 01:30 |
| GHSA-FM8W-2M5W-9J7R CVE-2026-56743 | Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match | 中危 | Gogithub.com/cilium/cilium | 已审查 | 2026-09-04 01:17 | 2026-09-04 01:17 |
| GHSA-4MVJ-M6J5-PMF7 CVE-2026-71428 | unstructured: Server-Side Request Forgery in the URL-based partitioning | 严重 | PyPIunstructured | 已审查 | 2026-09-04 01:02 | 2026-09-04 01:02 |
| GHSA-X79G-96J5-8JRV CVE-2026-85226 | 无摘要 | 中危 | —— | 未审查 | 2026-09-03 23:32 | 2026-09-03 23:32 |
| GHSA-MJ6H-P8F5-39RH CVE-2026-85227 | 无摘要 | 中危 | —— | 未审查 | 2026-09-03 23:32 | 2026-09-03 23:32 |
| GHSA-GP3M-78WH-Q857 CVE-2026-85230 | 无摘要 | 中危 | —— | 未审查 | 2026-09-03 23:32 | 2026-09-03 23:32 |
| GHSA-W3Q5-4JVR-JM6P CVE-2026-85214 | 无摘要 | 高危 | —— | 未审查 | 2026-09-03 23:32 | 2026-09-03 23:32 |
| GHSA-JR4R-3J8P-QX65 CVE-2026-85212 | 无摘要 | 高危 | —— | 未审查 | 2026-09-03 23:32 | 2026-09-03 23:32 |
| GHSA-JHVX-775R-CM5M CVE-2026-85211 | 无摘要 | 高危 | —— | 未审查 | 2026-09-03 23:32 | 2026-09-03 23:32 |