漏洞公告

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

cowboy and gun affected by an HTTP Request/Response Splitting vulnerability

MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler

actual Allows Electron to Run As Node

Authlib OAuth 2.0 has Open Redirect in Authorization API that allows attacker-controlled redirect_uri through unsupported response_type

gun has an Uncontrolled Resource Consumption vulnerability

Routinator crashes when sending a maliciously crafted select-asn query parameter

Routinator crashes when encountering maliciously crafted RRDP XML files

Routinator has cache path traversal when processing the module component of rsync URIs

gun has an Unexpected Status Code or Return Value vulnerability

gun_http2 has an Origin Validation Error vulnerability

GeoNode contains a server-side request forgery vulnerability in the service registration endpoint

Cordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViews.

Weaviate has an Improper Authorization issue

grepai Uses a Broken or Risky Cryptographic Algorithm

hsweb-framework has an open redirect issue

grepai Uses a Broken or Risky Cryptographic Algorithm

hsweb-framework has a Path Traversal issue

songquanpeng one-api has an issue that results in business logic errors

zilliztech deep-searcher has an Incorrect Privilege Assignment issue

Twig: Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points

Twig: XSS in profiler HtmlDumper via unescaped template and profile names

Bugsink: DOS using large numbers of event tags