漏洞公告

Concrete CMS is vulnerable to CSRF via Backend\File::approveVersion

Concrete CMS is vulnerable to Stored XSS via page name in the Atomik theme

Concrete CMS is vulnerable to IDOR + wrong-authorization-level in the Express association Reorder dialog

Go Net HTML parser is vulnerable to denial of service

Apache CXF has an LDAP injection vulnerability

Mattermost doesn't properly validate msgpack-encoded WebSocket frames before memory allocation

Apache CXF's WS-Transfer module has an insecure XML parser configuration

Mattermost doesn't validate user-supplied input in API request handlers

Mattermost doesn't archive the channel before removing persistent notifications

Mattermost doesn't enforce request body size limits on plugin HTTP endpoints

Mattermost doesn't sanitize team member data when returned via API to users without elevated permissions

Mattermost doesn't validate file ownership and access control

Mattermost doesn't validate the TIFF IFD offset in the image header before allocating memory

Apache CXF: Untrusted JMS configuration can lead to RCE

Nezha Monitoring: Nezha WebSocket server stream discloses cross-tenant server telemetry to authenticated members

Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron

Arcane: Missing admin authorization on global variables endpoint

instagrapi: Unsafe signup challenge path handling in instagrapi

aiograpi: Unsafe signup challenge path handling

Parse Server: Pre-authentication denial of service via client version header regex backtracking

Nezha Monitoring: RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks (no ownership check)

Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification

Flask-Security-Too OAuth reauthentication freshness bypass via cross- user OAuth identity acceptance