—— |
| 未审查 |
| 2026-08-25 05:33 |
| 2026-08-25 05:33 |
| GHSA-9P6G-3QXG-62HH CVE-2025-26237 | 无摘要 | 高危 | —— | 未审查 | 2026-08-25 05:33 | 2026-08-29 05:30 |
| GHSA-6C4P-988C-4WGF CVE-2026-71503 | 无摘要 | 中危 | —— | 未审查 | 2026-08-25 05:33 | 2026-08-25 05:33 |
| GHSA-52C7-5CWH-2F3G CVE-2026-13047 | 无摘要 | 未知 | —— | 未审查 | 2026-08-25 05:33 | 2026-08-25 05:33 |
| GHSA-3WQ4-PG59-R5HJ CVE-2025-26238 | 无摘要 | 高危 | —— | 未审查 | 2026-08-25 05:33 | 2026-08-29 05:30 |
| GHSA-JM48-M3RR-9HGG CVE-2026-55477 | 3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation | 高危 | Gogithub.com/mhsanaei/3x-ui/v2+1 | 已审查 | 2026-08-25 05:05 | 2026-08-25 05:05 |
| GHSA-W67G-5RQW-F597 | Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key | 中危 | Gogithub.com/gorilla/websocket | 已审查 | 2026-08-25 05:00 | 2026-08-25 05:00 |
| GHSA-4PH6-MJV7-3FQ6 | netfoil vulnerable to improper handling of untrusted DoH response data | 低危 | Gogithub.com/tinfoil-factory/netfoil | 已审查 | 2026-08-25 04:43 | 2026-08-25 04:43 |
| GHSA-FWJF-M4QW-9F2X CVE-2026-54625 | django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning) | 中危 | PyPIdjango-cms | 已审查 | 2026-08-25 04:09 | 2026-08-25 04:09 |
| GHSA-8JJ7-4V57-FRF5 CVE-2026-54623 | django CMS: Plugin move endpoint allows cyclic reparenting (DoS) | 高危 | PyPIdjango-cms | 已审查 | 2026-08-25 04:09 | 2026-08-25 04:09 |
| GHSA-3GJW-F78C-VVPW | tokio-postgres: Panic on a `DataRow` with fewer fields than columns allows denial of service | 中危 | crates.iotokio-postgres | 已审查 | 2026-08-25 03:49 | 2026-08-25 03:49 |
| GHSA-RGQC-3X5P-6GWG | postgres-protocol: Panic decoding a malformed `hstore` value allows denial of service | 中危 | crates.iopostgres-protocol | 已审查 | 2026-08-25 03:47 | 2026-08-25 03:47 |
| GHSA-5X78-73V4-XG6W | postgres-protocol: Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service | 高危 | crates.iopostgres-protocol | 已审查 | 2026-08-25 03:43 | 2026-08-25 03:43 |
| GHSA-9284-FJC3-FMMJ CVE-2026-54050 | Sakai Profile Image Deletion has an IDOR | 中危 | Mavenorg.sakaiproject.profile2:profile2-api+1 | 已审查 | 2026-08-25 03:40 | 2026-08-25 03:40 |
| GHSA-W2X5-GV52-9CCV CVE-2026-54049 | Sakai Conversations has a Stored XSS Issue | 高危 | Mavenorg.sakaiproject.conversations:sakai-conversations-impl+2 | 已审查 | 2026-08-25 03:37 | 2026-08-25 03:37 |
| GHSA-XM98-3VCF-FPH7 CVE-2026-53710 | mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server | 严重 | PyPImcp-contextforge-gateway | 已审查 | 2026-08-25 03:20 | 2026-09-02 23:28 |
| GHSA-J9WC-MRP3-532H CVE-2026-76838 | 无摘要 | 高危 | —— | 未审查 | 2026-08-25 02:31 | 2026-08-25 02:31 |
| GHSA-GQXG-R7GF-M7M7 CVE-2026-78475 | 无摘要 | 中危 | —— | 未审查 | 2026-08-25 02:31 | 2026-08-25 02:31 |
| GHSA-6JJX-JH3J-CXQJ CVE-2026-76837 | 无摘要 | 中危 | —— | 未审查 | 2026-08-25 02:31 | 2026-08-25 02:31 |
| GHSA-3H97-6772-MPJ4 CVE-2026-9254 | 无摘要 | 高危 | —— | 未审查 | 2026-08-25 02:31 | 2026-08-25 02:31 |
| GHSA-XQR4-4XJV-5J7Q CVE-2026-76072 | 无摘要 | 高危 | —— | 未审查 | 2026-08-25 02:31 | 2026-08-25 02:31 |
| GHSA-VVQV-7VRF-88VH CVE-2026-76835 | 无摘要 | 严重 | —— | 未审查 | 2026-08-25 02:31 | 2026-08-25 02:31 |
| GHSA-P8P3-H9CW-M38M CVE-2026-71982 | 无摘要 | 未知 | —— | 未审查 | 2026-08-25 02:31 | 2026-08-25 02:31 |
| GHSA-HPMR-74GJ-7M6C CVE-2026-71943 | 无摘要 | 高危 | —— | 未审查 | 2026-08-25 02:31 | 2026-08-25 02:31 |