漏洞公告

无摘要

无摘要

无摘要

无摘要

无摘要

无摘要

无摘要

无摘要

eml_parser vulnerable to DoS via deeply nested parens in Received headers

eml_parser has parser DoS via deeply nested parentheses in e-mail headers

eml_parser has a URL extraction bypass via HTML entities in URLs

AshAuthentication vulnerable to OAuth2/OIDC account takeover via email-based user matching

mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)

gRPC Erlang package has unbounded gzip decompression (decompression bomb)

gRPC Erlang package has unbounded request body accumulation in `read_full_body/3`

gRPC Erlang package's path bindings are overridable by query string and request body

gRPC Erlang package vulnerable to Remote Code Execution with attacker-controlled gRPC payloads

genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport

mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment

reachy_mini Allows Unrestricted Upload of File with Dangerous Type

Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts

phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold

phpMyFAQ public FAQ APIs expose inactive FAQ content