MINI-62HR-XMJC-Q7Q2

Bulletin has no description...

MINI-CCCV-5H6C-7HWH

Bulletin has no description...

MINI-VHG8-VHHF-29JR

Bulletin has no description...

MINI-5R68-RQXC-6W4Q

Bulletin has no description...

MINI-FWRQ-PG27-8273

Bulletin has no description...

MINI-HXR8-88WW-XJJ2

Bulletin has no description...

ECHO-4429-8097-B109

Bulletin has no description...

ECHO-C8E7-731E-B0F8

Bulletin has no description...

ECHO-1888-E250-4427

Bulletin has no description...

GHSA-M9RG-MR6G-75GM vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter, py3-jupyterlab...

GHSA-95FC-G4GJ-MQMX vulnerabilities

Vulnerabilities for packages: rancher...

CVE-2026-58580

LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginState, updatePluginError, updateTTS and updateTranslate methods filter target rows by message id alone, omitting the userId scope that sibli...

CVE-2026-7311

creationtimestamp| type| source ---|---|--- 2026-07-02 20:16:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpotyblujl2q 2026-07-02 22:03:09+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpozwmi2ca2g 2026-07-03 12:16:06+00:00| seen|...

MINI-QJWX-FR7P-26M4

Bulletin has no description...

MINI-JW73-CPXF-MMMQ

Bulletin has no description...

MINI-W673-C5G4-9VXF

Bulletin has no description...

MINI-VP8M-4V54-HHJJ

Bulletin has no description...

CVE-2026-58580 LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes

LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginState, updatePluginError, updateTTS and updateTranslate methods filter target rows by message id alone, omitting the userId scope that sibli...

CVE-2026-58580 LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes

LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginState, updatePluginError, updateTTS and updateTranslate methods filter target rows by message id alone, omitting the userId scope that sibli...

CVE-2026-58580 LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes

LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginState, updatePluginError, updateTTS and updateTranslate methods filter target rows by message id alone, omitting the userId scope that sibli...