漏洞公告

Hysteria vulnerable to server crash when max_datagram_frame_size very small

Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF

@cyclonedx/cdxgen: Maven project scanning may allow shell command injection through repository-controlled module paths

Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing

Apptainer has incorrect path matching for 'limit container paths' directive

pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)

Incus has an arbitrary file write on its client due to trusted image hash

@sigstore/core has DSSE payloadType type-binding failure

Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7)

Incus has an argument injection in backup compression algorithm leading to AFW and ACE

Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool}

Incus has an arbitrary file write via path traversal in S3 multipart upload

Incus has arbitrary file read+write on host via templates/ symlink in malicious image

extract-zip unvalidated symlink path traversal

Incus has a restricted project bypass leading to arbitrary command execution

Incus has an arbitrary file write on host via `exec-output` symlink in crafted image

Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image

ImageMagick has Null Pointer Dereference caused by the distort operation when passing incorrect arguments

OpenAM Account Takeover via Unverified Password Change in OAuth2 Module

OpenAM Authentication Bypass via MSISDN LDAP Injection

fluent-plugin-opentelemetry Has Denial of Service (DoS) via Large Payloads and Decompression Bombs in `in_opentelemetry`

fluent-plugin-s3 Vulnerable to Denial of Service (DoS) via Decompression Bomb in `in_s3`

Fluentd is Vulnerable to Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`