MINI-4H23-67GQ-XPVW

Bulletin has no description...

MINI-3XGC-53CX-FF5F

Bulletin has no description...

MINI-3Q3M-F8VH-FCC8

Bulletin has no description...

10minions-engine (>=0.0.1, <=0.0.4), @1amageek/document-propagator (>=0.10.1, <=1.0.0) +1538 more potentially affected by CVE-2026-44295 via protobufjs-cli (>=1.0.0, <=1.1.3)

protobufjs-cli NPM version =1.0.0, =0.0.1, =0.10.1, =1.1.0, =0.4.0, =1.22.0, =6.2.36, =1.0.0-alpha.2, =1.8.0, =0.0.0-beta.0, =1.0.0, =1.0.1, =3.1.0 and more Source cves: CVE-2026-44295 Source advisory: GHSA-6R35-46G8-JCW9...

Logged-in user bypasses share password and download restrictions on Text attachments via documentId

None...

MINI-W737-RP7H-6X4Q

Bulletin has no description...

MINI-VW74-24FX-VMMF

Bulletin has no description...

MINI-V3QQ-HQPF-8V99

Bulletin has no description...

MINI-PQ2M-J5PR-C4QM

Bulletin has no description...

MINI-3673-3WXJ-CWPM

Bulletin has no description...

MINI-8HWM-VGV3-4957

Bulletin has no description...

MINI-86QW-WX92-PXJR

Bulletin has no description...

MINI-24J5-V4M9-MHVP

Bulletin has no description...

EUVD-2026-29358

Reserved. Details will be published at disclosure...

EUVD-2026-29355

Reserved. Details will be published at disclosure...

CVE-2026-31215

The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface. The DELETE /indexname/documents endpoint lacks proper authentication and authorization controls and does not validate the user-supplied pathorurl parameter...

PT-2026-40314

Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. This issue has been patched in version 12.2.0...

PT-2026-40315

Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has been patched in version 12.2.0...

CVE-2026-42889: Incorrect Authorization

Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were incorrectly treated as having full...

Relay Server 安全漏洞

Relay Server is an open-source system by System 3 that supports offline collaborative real-time document synchronization. There were security vulnerabilities in the Relay Server versions 0.9.0 to 0.9.6. These vulnerabilities stemmed from WebSocket endpoints for multiple documents, where WebSocket...