漏洞公告

Caddy CVE-2026-30852 Fix Bypass

Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation

Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint

Bandit: Unauthenticated DoS via chunked request trailers in Bandit HTTP/1 decoder

Bandit: Unauthenticated one-shot DoS via `Transfer-Encoding: chunked`

9router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes

Kopia: RCE via SSH ProxyCommand Injection

Jaspersoft Reports: Java Deserialization Vulnerability Lleads to Remote Code Execution (RCE)

BillaBear is Vulnerable to SQL Injection in the EventRepository

APScheduler's JSONSerializer and CBORSerializer are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization

Apify Model Context Protocol (MCP) server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matching

Budibase: Unrestricted Upload of File with Dangerous Type

Budibase: Missing Cache Invalidation on Public API Role Unassignment Allows Revoked Users to Retain Privileges for Up to 1 Hour

AVideo: Unauthenticated Arbitrary Image Read via Path Traversal in `view/img/image404Raw.php`

protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion

libcrux-ml-dsa: Signature Verification on AVX2 Platforms Mishandles Edge Case

libcrux: Potential Panic on Overlong Ciphertext Buffer

Envoy AI Proxy - MCP Message Smuggling Vulnerability

Github Actions issued GITHUB_TOKEN disclosure in GitHub Actions logs

n8n: Credential exfiltration via Allowed HTTP Request Domains Bypass

n8n: Legacy ExecuteWorkflow Node Bypassed File Path Restrictions

Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs

Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation