Статьи Support
🚨 CVE-2026-67285
Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system.
🚨 CVE-2026-50561
Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. Prior to version 0.6.2, the project's authentication mechanism contains a flaw. In affected versions, the system does not sufficiently validate the identity token in the...
🚨 CVE-2026-66375
A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions.
🚨 CVE-2026-66376
Credentials for a deleted user may remain valid for a short period under specific conditions.
🚨 CVE-2026-66377
An unauthenticated user may access restricted repository information under specific conditions.
🚨 CVE-2026-66378
An authenticated user without repository read permission may access private NuGet metadata under specific conditions.
🚨 CVE-2026-66379
An authenticated user may view private Puppet module metadata without repository read access.
🚨 CVE-2026-66380
An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions.
🚨 CVE-2026-66381
A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions.
🚨 CVE-2026-66382
An authenticated user may write files outside the intended Artifactory work directory under specific conditions.
🚨 CVE-2026-68752
A Project Resource Manager may gain broader administrative privileges under specific conditions.
🚨 CVE-2026-68753
An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way.
🚨 CVE-2026-68754
A repository publisher without delete permission may modify protected package content under specific conditions.
🚨 CVE-2026-68755
A bundle writer may create misleading release promotion information under specific conditions.
🚨 CVE-2026-68756
A party with write access to stored session data may affect JFrog Artifactory under specific conditions.
🚨 CVE-2026-68757
A user with access to a valid SAML response may impersonate another user under specific conditions.
🚨 CVE-2026-68760
An unauthenticated user may bypass authentication under specific cache conditions.
🚨 CVE-2026-54183
Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI. The masker's recursion-depth limit did not descend into values nested inside a list, tuple, or set beyond that limit, so an Airflow Variable holding such a...
🚨 CVE-2026-58076
Apache Airflow's serialization layer reconstructed exception nodes by calling `import_string()` on a class name taken from the serialized blob and instantiating it with arguments from the same blob, with no restriction on what could be imported. An operator's `executor_config`...
🚨 CVE-2026-59242
Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal payload through `BaseXCom.deserialize_value` without the `_check_forbidden_xcom_keys` guard, allowing an authenticated API user with XCom write-and-read access to...
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.