CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-114094

    🚨 CVE-2026-114094 Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file...

  • CVE-2026-114095

    🚨 CVE-2026-114095 Dulwich before 1.2.9 contains a denial of service vulnerability in Pack.resolve_object that allows attackers to cause infinite...

  • CVE-2026-114096

    🚨 CVE-2026-114096 Dulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in porcelain.checkout(paths=[...]) that allows...

  • CVE-2026-114097

    🚨 CVE-2026-114097 Dulwich from 0.23.1 before 1.2.8 contains a path traversal vulnerability in CommitFilter._apply_index_filter() that allows...

  • CVE-2026-114098

    🚨 CVE-2026-114098 Dulwich from 0.22.5 before 1.2.8 contains a path traversal vulnerability in stash.py pop() that allows attackers to write...

  • CVE-2026-114099

    🚨 CVE-2026-114099 Coraza from 3.0.0 before 3.8.1 has a JSON body processor that flattens nested properties into dot-separated ARGS_POST names...

  • CVE-2026-114100

    🚨 CVE-2026-114100 Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body processor selection compares the...

  • CVE-2026-114101

    🚨 CVE-2026-114101 Coraza before 3.8.1 extracts multipart upload filenames with Go's mime.ParseMediaType, which silently ignores RFC 5987 filename*...

  • CVE-2026-114102

    🚨 CVE-2026-114102 adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attackers to crash the Node.js...

  • CVE-2026-114103

    🚨 CVE-2026-114103 adm-zip 0.6.0 contains a decompression bomb protection bypass that allows attackers to evade the maxOutputLength guard by...

  • CVE-2026-114104

    🚨 CVE-2026-114104 adm-zip before 0.6.1 contains an inconsistent entry resolution vulnerability that allows attackers to bypass content validation...

  • CVE-2026-114106

    🚨 CVE-2026-114106 HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that allows remote attackers to read...

  • CVE-2026-114107

    🚨 CVE-2026-114107 HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to...

  • CVE-2026-114108

    🚨 CVE-2026-114108 HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers...

  • CVE-2026-114109

    🚨 CVE-2026-114109 uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts...

  • CVE-2026-114110

    🚨 CVE-2026-114110 Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by supplying...

  • CVE-2026-114111

    🚨 CVE-2026-114111 sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability (CVE-2026-96889) that, under certain...

  • CVE-2026-114112

    🚨 CVE-2026-114112 Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on...

Статистика статей

Статьи
53,087
Просмотры
255,260
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху