cve-2026-22732-poc

CVE-2026-22732 — Proof of Concept Spring Security は HTTP レスポンスのセキュリティヘッダーを黙って破棄する。デモ／教育目的のみ。このローカルアプリ以外に対して実行しないこと。 | ---|--- CVE| CVE-2026-22732 CWE-425、公開 2026-03-19 CVSS 3.1| 9.1 CRITICAL — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 直接依存| spring-boot-starter-web + spring-boot-starter-security 2.7.18...

cve

CVE 问题描述：Stackoverflow 我正尝试在 Docker 中构建项目，因此使用 Docker Desktop 来构建我的项目。在构建镜像时，我遇到了以下漏洞之一： CVE-2024-26308 CWE-770 7.5 H Apache Commons Compress 中存在无限制或节流资源分配漏洞。该问题影响 Apache Commons Compress 1.21 至 1.26 之前版本。建议用户升级到修复该问题的 1.26 版本。 CVSS 评分：7.5 CVSS 向量：CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...

reproducer-okio-cve-2023-3635

reproducer-okio-cve-2023-3635 このリポジトリが再現するもの facebook/react-native58148 の再現リポジトリです: React Native 自身の packages/react-native/gradle/libs.versions.toml は okhttp = "4.9.2" / okio = "2.9.0" を固定しており、okio 2.9.0 は CVE-2023-3635 / GHSA-w33c-445m-f8w7 の影響を受けます。 これは okio 3.4.0 で修正されています。...

confetti (>=4.0.0-rc.0, <=4.1.4) potentially affected by CVE-2026-61534 via yayson (>=4.1.0, <=4.2.0)

yayson NPM version =4.1.0, =4.0.0-rc.0, =4.1.4 Source cves: CVE-2026-61534 Source advisory: OSV:GHSA-325J-MG25-8Q58...

@mockoon/cli (>=9.0.0, <=9.6.1), @mockoon/serverless (>=9.0.0, <=9.6.1) +2 more potentially affected by CVE-2026-59148 via @mockoon/commons-server (>=9.0.0, <=9.6.1)

@mockoon/commons-server NPM version =9.0.0, =9.0.0, =9.0.0, =0.0.1, =0.30.0, =0.40.0 Source cves: CVE-2026-59148 Source advisory: OSV:GHSA-RQX4-3F6Q-3X2V...

@mockoon/cli (>=9.0.0, <=9.6.1), @mockoon/serverless (>=9.0.0, <=9.6.1) +2 more potentially affected by CVE-2026-59149 via @mockoon/commons-server (>=9.0.0, <=9.6.1)

@mockoon/commons-server NPM version =9.0.0, =9.0.0, =9.0.0, =0.0.1, =0.30.0, =0.40.0 Source cves: CVE-2026-59149 Source advisory: OSV:GHSA-8WQC-V2Q8-VFF2...

@frontmcp/adapters (>=1.0.4, <=1.5.0-rc.1), @frontmcp/plugin-skilled-openapi (>=0.0.1, <=1.5.0-rc.1) potentially affected by CVE-2026-59973 via mcp-from-openapi (>=2.3.0, <=2.4.0)

mcp-from-openapi NPM version =2.3.0, =1.0.4, =0.0.1, =1.5.0-rc.1 Source cves: CVE-2026-59973 Source advisory: OSV:GHSA-65H7-9WRW-629C...

@frontmcp/plugin-skilled-openapi (>=1.2.1, <=1.4.1) potentially affected by CVE-2026-59973 via @frontmcp/adapters (>=1.2.1, <=1.4.1)

@frontmcp/adapters NPM version =1.2.1, =1.2.1, =1.4.1 Source cves: CVE-2026-59973 Source advisory: OSV:GHSA-65H7-9WRW-629C...

@argos-ci/cli (>=5.0.0, <=5.1.0), @argos-ci/cypress (>=7.0.0, <=7.0.7) +2 more potentially affected by CVE-2026-59960 via @argos-ci/core (>=6.0.0, <=6.2.0)

@argos-ci/core NPM version =6.0.0, =5.0.0, =7.0.0, =7.0.0, =6.0.0, =6.0.8 Source cves: CVE-2026-59960 Source advisory: OSV:GHSA-4X45-GXVP-6283...

create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-88060 via @angular/platform-server (>=21.1.2, <=21.2.9)

@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-88060 Source advisory: OSV:GHSA-V3P8-WHQ6-R5JG...

3d-card (0.0.2), @cosla/sensemaking-web-ui (>=1.0.5, <=1.0.9) +20 more potentially affected by CVE-2026-88060 via @angular/platform-server (>=19.2.18, <=19.2.25)

@angular/platform-server NPM version =19.2.18, =1.0.5, =0.0.1-rc.2, =1.0.0, =0.0.2, =19.1.0, =16.0.0, =1.52.0, =0.0.0, =0.0.0, =14.1.0, =14.3.0 and more Source cves: CVE-2026-88060 Source advisory: OSV:GHSA-V3P8-WHQ6-R5JG...

@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-88060 via @angular/platform-server (>=20.0.0, <=20.3.19)

@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-88060 Source advisory: OSV:GHSA-V3P8-WHQ6-R5JG...

create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-88056 via @angular/platform-server (>=21.1.2, <=21.2.9)

@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-88056 Source advisory: OSV:GHSA-F6MR-PJWC-34M4...

@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-88056 via @angular/platform-server (>=20.0.0, <=20.3.19)

@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-88056 Source advisory: OSV:GHSA-F6MR-PJWC-34M4...

3d-card (0.0.2), @cosla/sensemaking-web-ui (>=1.0.5, <=1.0.9) +20 more potentially affected by CVE-2026-88056 via @angular/platform-server (>=19.2.18, <=19.2.25)

@angular/platform-server NPM version =19.2.18, =1.0.5, =0.0.1-rc.2, =1.0.0, =0.0.2, =19.1.0, =16.0.0, =1.52.0, =0.0.0, =0.0.0, =14.1.0, =14.3.0 and more Source cves: CVE-2026-88056 Source advisory: OSV:GHSA-F6MR-PJWC-34M4...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.8), @bitblit/ngx-acute-common (>=6.1.210-alpha, <=6.1.222-alpha) +16 more potentially affected by CVE-2026-88059 via @angular/common (>=22.0.0, <=22.0.8)

@angular/common NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =23.0.0-alpha.2, =23.0.0-alpha.2, =0.0.0, =0.249.2, =0.250.0 and more Source cves: CVE-2026-88059 Source advisory: OSV:GHSA-P297-FM68-3Q8C...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +311 more potentially affected by CVE-2026-88059 via @angular/common (>=19.0.0, <=19.2.25)

@angular/common NPM version =19.0.0, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 and more Source cves: CVE-2026-88059 Source advisory: OSV:GHSA-P297-FM68-3Q8C...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +33 more potentially affected by CVE-2026-88059 via @angular/common (>=20.0.0, <=20.3.25)

@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =1.1.89, =0.0.57, =0.7.2, =0.7.3 and more Source cves: CVE-2026-88059 Source advisory: OSV:GHSA-P297-FM68-3Q8C...

@amwaljs/checkout-angular (0.2.11), @bitblit/ngx-acute-common (>=6.1.182-alpha, <=6.1.209-alpha) +53 more potentially affected by CVE-2026-88059 via @angular/common (>=21.0.0, <=21.2.19)

@angular/common NPM version =21.0.0, =6.1.182-alpha, =6.1.182-alpha, =0.1.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =3.0.1, =2.0.1, =2.0.1, =2.0.1, =6.0.1, =2.0.1, =4.0.0, =6.1.0-edge.5 and more Source cves: CVE-2026-88059 Source advisory: OSV:GHSA-P297-FM68-3Q8C...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.8), @bitblit/ngx-acute-common (>=6.1.210-alpha, <=6.1.222-alpha) +16 more potentially affected by CVE-2026-88057 via @angular/compiler (>=22.0.0, <=22.0.8)

@angular/compiler NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =23.0.0-alpha.2, =23.0.0-alpha.2, =0.0.0, =0.249.2, =0.250.0 and more Source cves: CVE-2026-88057 Source advisory: OSV:GHSA-HH8M-FM6V-7CVG...