漏洞公告

GoBGP has an Improper Resource Shutdown or Release

Funadmin has an Improper Access Control Issue

Prefect Git Argument Injection in GitRepository Pull Steps

Prefect SSRF Bypass via DNS Rebinding in validate_restricted_url

Prefect Unauthenticated Event Injection via /api/events/in WebSocket

Prefect Auth Bypass via endswith() Health Check Exemption

MindsDB has an Improper Access Control Issue

Dolibarr has an Injection issue

Dolibarr has Insufficient Verification of Data Authenticity

SGLang has an Improper Input Validation/Injection Issue

sublinear-time-solver has a Path Traversal Issue

yii2-mcp-server has a Command Injection Issue

mem0ai mem0 has an Improper Input Validation Issue

MixPHP Framework has an SQL injection vulnerability

MixPHP Framework has an SQL injection vulnerability via crafted `data` array

Apache MINA vulnerable to Deserialization of Untrusted Data (CVE-2026-41635 Incomplete Fix)

AstrBot Makes Use of Hard-coded Password

Apache MINA vulnerable to Deserialization of Untrusted Data (CVE-2026-41409 Incomplete Fix)

Apache Neethi doesn't impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API

OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere

@diplodoc/search-extension allows stored XSS via Markdown file title

OpenStack Keystone has an Incorrect Authorization Issue

Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization