漏洞公告

Nezha Monitoring: Unbounded WebSocket Streams — Resource Exhaustion DoS

Statamic Vulnerable to CSV formula injection in form submission exports

Statamic Vulnerable to Server-Side Request Forgery via Glide (DNS rebinding)

Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key

Nezha Monitoring: Stored future DDNS profile ID allows unauthorized use of another user's DDNS profile context

Nezha Monitoring: Authenticated users can claim the dashboard Host through NAT and preempt all dashboard routing

pnpm Vulnerable to Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)

pnpm binds unscoped user-level npm auth credentials to a repository-selected registry

pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement

pnpm: Git Fetch Argument Injection via Lockfile resolution.commit

pnpm Has an Integrity Check Bypass via Missing Lockfile Integrity Field

pnpm: Unsafe default behavior breaks integrity check

ex_aws_sns: Trusted-attacker `SigningCertURL` permits complete SNS signature bypass

js-toml has silent type confusion via falsy-primitive duplicate-key bypass

regclient may leak authentication credentials to external blob stores

Authelia has an Edge Case Access Control Rule Mismatch

Nezha vulnerable to cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check

Blnk has an API key authorization bypass in owner and scope enforcement

YARD static cache reads raw traversal paths before router sanitization

@microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapter

js-toml vulnerable to CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals

SolidInvoice: IDOR in LiveComponent allows same-company cross-user access to API tokens and notification transport settings

Statamic CMS's unsafe method invocation via collection sorting allows data destruction