漏洞公告

Microsoft Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName

Microsoft Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info`

Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF

Microsoft Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

Microsoft Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions

SvelteKit: Prototype pollution in file input deletion path in remote-function forms

SvelteKit: Big remote form function payloads can cause Node process to crash

AWS CLI: Overly permissive File Permissions

ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape

Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)

Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator

Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator

Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator

Better Auth: Account takeover via pre-account hijacking on magic-link and email-OTP sign-in

@better-auth/stripe: cross-organization billing tampering in organization subscription actions

@better-auth/scim: account takeover and stale access via SCIM provider-id collision

ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title

Microsoft Kiota: XML Doc-Comment Newline Breakout Code Injection

httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling

ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified

ImageMagick: Memory Leak in ICON decoder when allocation fails

ImageMagick: Memory leak in VIFF encoder when allocation fails

ImageMagick: Memory Leak in MIFF encoder when allocaton fails