漏洞公告

EasyAdmin custom-action dispatcher bypasses access_control on other routes

Livewire DOM-based cross-site scripting during client-side state handling

Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop

Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root

pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace

elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)

elFinder: CSRF in netmount allows forced FTP mounts and server-side FTP connections

pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraph

pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on install

NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y'

NLTK: Downloader.download follows hardlinks and overwrites outside-root files

NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots

NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`

NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars

NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input

ImageMagick: Memory Leak when providing invalid options to the cli

humanfs: Recursive copy follows symlinked files and copies data from outside the source tree

Faker: helpers.fake exploitable into arbritary code execution

Siyuan: Authenticated path traversal in /snippets/ static handler (serveSnippets) leaks conf/conf.json secrets and siyuan.db

SiYuan: SQL Query in Block Search Exposes Hidden Published Document Content

gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

TYPO3 CMS - Broken Access Control in Backend and Install Tool

Filament: Multi-factor authentication (app) codes can still be used after a newer code has been used