漏洞公告

OpenClaw: MCP loopback owner context is derived from server-issued bearer tokens

OpenClaw: Workspace dotenv files cannot override connector endpoint hosts

OpenClaw's ACP child sessions inherit subagent security envelope constraints

OpenClaw validates Zalo outbound photo URLs through the SSRF guard

Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)

Pillow has a PDF Parsing Trailer Infinite Loop (DoS)

Pillow has an integer overflow when processing fonts

Pillow has a heap buffer overflow with nested list coordinates

pyp2spec is Vulnerable to Code Injection

Argo vulnerable to exposure of artifact repository credentials

Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure

Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor

Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go)

Argo has Missing Authorization in its Sync ConfigMap Provider

Kirby CMS's system API endpoint leaks installed version and license data to authenticated users

Kirby CMS doesn't gate user avatar creation, replacement and deletion with user update permissions

Kirby CMS's read access to site, user and role information is not gated by permissions

Incus is affected by unbounded binary import disk exhaustion

Incus has Nil Dereferences on Restore via Malformed YAML

Incus has Unbounded YAML Metadata Decode via Parsing

Incus has Nil-Pointer Dereference via S3 Bucket Import

Kata Container has CopyFile Policy Subversion via Symlinks

OpenMRS has Stored Velocity SSTI to RCE via ConceptReferenceRange