6 matches found
CVE-2025-30374
CVE-2025-30374 Taipy 中的类污染漏洞，可导致 RCE、XSS、DoS 和凭据泄露 摘要 在 Taipy v4.0.3（发现时的最新版本）中发现了一个类污染漏洞。该漏洞允许未经授权的攻击者覆盖 Taipy 服务端运行时上下文，进而导致 RCE、反射型 XSS、拒绝服务（DoS）以及敏感授权凭据（如 OpenAI 令牌）泄露等严重后果。 详情 背景 类污染（类似于 JavaScript 中的原型污染）是 Python 中一个相对较新的漏洞。它发生在攻击者能够在运行时意外覆盖模块的全局变量或某些类与函数的属性时。此问题归类于 CWE-915。 有关类污染的更多信息，请参阅：...
GO-2026-6326 free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI in github.com/free5gc/ausf
free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI in github.com/free5gc/ausf...
GHSA-334Q-H5G3-FPXV free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI
Summary The AUSF component of free5GC stores per-subscriber authentication state in a global sync.Map keyed only by SUPI. Every incoming authentication request creates a new AusfUeContext and stores it under that SUPI key without checking whether an authentication procedure is already in progress...
free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI
Summary The AUSF component of free5GC stores per-subscriber authentication state in a global sync.Map keyed only by SUPI. Every incoming authentication request creates a new AusfUeContext and stores it under that SUPI key without checking whether an authentication procedure is already in progress...
PT-2026-53450
Summary The environment variables used during the rendering of the Kubernetes manifest allow YAML injection, enabling attackers to overwrite existing keys like securityContext and inject multi-document YAML to create additional unintended Kubernetes resources. Details The server interpolates...
Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering
Summary The environment variables used during the rendering of the Kubernetes manifest allow YAML injection, enabling attackers to overwrite existing keys like securityContext and inject multi-document YAML to create additional unintended Kubernetes resources. Details The server interpolates...