漏洞公告

Concrete CMS is vulnerable to Stored XSS via external-link page cvName

Concrete CMS is vulnerable to IDOR in AddMessage/UpdateMessage

Concrete CMS's RSS Displayer block accepts a feed URL from any page editor and fetches it server-side without validation

Concrete CMS has an unauthorized file access issue

Concrete CMS: OAuth 2.0 Authorization-Code Handler Bypasses Account Status

Concrete CMS is subject to Insecure Direct Object Reference (IDOR) in the Express Entry Detail block

Concrete CMS is vulnerable to unauthorized file deletion

Concrete CMS is vulnerable to IDOR combined with a missing authentication gate

Concrete CMS is vulnerable to IDOR

Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret

Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host

BoxLite: Permission Bypass Allows Modification of Read-Only Files

ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse

ImageMagick: Division by Zero in binomial kernel

ImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix

@nevware21/ts-utils: Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty

containerd user ID handling bypass allows runAsNonRoot evasion

js-libp2p: Memory DoS via subscription flood of unique topics

Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)

Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory

SQLAdmin: Authorization Bypass on `ajax_lookup`

Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation

Twig: Sandbox property and method bypass via object-destructuring assignment