13355 matches found
CVE-2026-48509 MessagePack-CSharp: ASP.NET Core MessagePackInputFormatter defaults to TrustedData for HTTP request bodies
MessagePack for C is a MessagePack serializer for C. Prior to 2.5.301 and 3.1.7, the parameterless MessagePackInputFormatter constructor uses default serializer options, which resolve to MessagePackSerializerOptions.Standard with MessagePackSecurity.TrustedData. The formatter is designed for...
CVE-2026-49468 LiteLLM: Authentication Bypass via Host Header Injection
LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to 1.84.0, a Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated access to protected management routes. The auth layer derived the effective route from...
EUVD-2026-38332
LangChain is a framework for building agents and LLM-powered applications. Prior to 1.3.9, several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search...
MINI-85RC-XJJR-M28X
Bulletin has no description...
MINI-Q58C-458R-FF7M
Bulletin has no description...
MINI-Q585-GQ5X-W2QC
Bulletin has no description...
MINI-WXR3-FRX2-FJGG
Bulletin has no description...
MINI-QCW3-X846-PH36
Bulletin has no description...
MINI-PX5F-74J5-P28J
Bulletin has no description...
MINI-MQ5G-PG6W-RPX2
Bulletin has no description...
MINI-434F-99MX-3HXX
Bulletin has no description...
MINI-573V-H8QX-35VP
Bulletin has no description...
MINI-FW4P-M2J6-5V3H
Bulletin has no description...
MINI-V2PF-R823-4QJF
Bulletin has no description...
MINI-352P-XP5F-23GM
Bulletin has no description...
MINI-544W-VRMV-G3FR
Bulletin has no description...
MINI-G95V-5G2P-JJP2
Bulletin has no description...
MINI-MV69-X7RQ-P32W
Bulletin has no description...