漏洞公告

JupyterLab PluginManager lock-rule enforcement bypass

JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)

Next.js: Server-Side Request Forgery in Server Actions on custom servers

Next.js: Cache confusion of response bodies for requests with bodies

Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Next.js: Unbounded Server Action payload in Edge runtime

Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Next.js: Denial of Service in the Image Optimization API using SVGs

Next.js: Unauthenticated disclosure of internal Server Function endpoints

Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Next.js: Denial of Service in App Router using Server Actions

Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests

Eclipse Jetty: Path parameter traversal

Eclipse Jetty: HTTP Authority/Host mismatch

Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections

Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution

n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data

Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem

Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps

Dompdf: Uncontrolled resource consumption based on declared BMP dimensions

LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

LiteLLM: Local file read via request-supplied OIDC file references