CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-73602

    🚨 CVE-2026-73602 Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to...

  • CVE-2026-73603

    🚨 CVE-2026-73603 Flowise before 3.1.4 fails to validate chatflow visibility in the unauthenticated text-to-speech endpoint, allowing attackers to...

  • CVE-2026-73604

    🚨 CVE-2026-73604 Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that...

  • CVE-2026-73605

    🚨 CVE-2026-73605 SiYuan versions before v3.7.4 contain a path traversal vulnerability in the getUniqueFilename endpoint that allows anonymous...

  • CVE-2026-73606

    🚨 CVE-2026-73606 SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/block/getRefIDs endpoint that fails to...

  • CVE-2026-73607

    🚨 CVE-2026-73607 SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/storage/getOutlineStorage endpoint that...

  • CVE-2026-73608

    🚨 CVE-2026-73608 SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not present in v3.7.3 or master, patched in v3.7.4)...

  • CVE-2026-73609

    🚨 CVE-2026-73609 SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getBookmarkLabels endpoint that returns all...

  • CVE-2026-73614

    🚨 CVE-2026-73614 Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns, while...

  • CVE-2026-73615

    🚨 CVE-2026-73615 Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command...

  • CVE-2026-73617

    🚨 CVE-2026-73617 Budibase before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB datasource integration where user-supplied...

  • CVE-2026-73618

    🚨 CVE-2026-73618 Budibase Server before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB query execution endpoint where...

  • CVE-2026-73619

    🚨 CVE-2026-73619 GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and...

  • CVE-2026-73620

    🚨 CVE-2026-73620 GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing...

  • CVE-2026-73621

    🚨 CVE-2026-73621 GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count() method, which forwards keyword...

  • CVE-2026-73622

    🚨 CVE-2026-73622 GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create() and Submodule.add() URL handling...

  • CVE-2026-73623

    🚨 CVE-2026-73623 GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to...

  • CVE-2026-73624

    🚨 CVE-2026-73624 GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to...

Статистика статей

Статьи
53,088
Просмотры
262,891
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху