5981 matches found
ECHO-76FC-8CCD-D030
Bulletin has no description...
ECHO-8F88-0520-1270
Bulletin has no description...
ECHO-02E1-F73D-9326
Bulletin has no description...
ECHO-6CB2-C3D1-6736
Bulletin has no description...
LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests
SummaryThe server defaults to CORSORIGINS= combined with allowcredentials=True. Starlette's CORSMiddleware echoes the requesting origin in preflight responses when credentials are enabled, meaning every origin is effectively whitelisted for credentialed cross-origin requests. Any malicious websit...
ECHO-8B20-D6E3-E563
Bulletin has no description...
ECHO-7190-6B4D-BCCE
Bulletin has no description...
ECHO-18B0-99B8-3F51 Vulnerability is in a Vulkan HEVC decoder code path that does not exist in this version. Refs: - https://security-tracker.debian.org/tracker/CVE-2026-64831 details: | The vulnerable code (a stack-allocated VPS/SPS parameter struct built per-frame in vk_hevc_end_frame(), overflowed by an unchecked vps_num_hrd_parameters) was introduced by upstream commit 82864c21 ("vulkan_hevc: use VK_KHR_video_maintenance2 if available", 2026-03-14) as part of a refactor that is not present in the 7.1.x branch. In this source, vk_hevc_end_frame() has no such stack buffer: VPS HRD parameters are built once into a heap buffer in alloc_hevc_header_structs()/set_vps(), whose destination arrays are bounded by HEVC_MAX_LAYER_SETS (1024), and vps_num_hrd_parameters is already bounded by vps_num_layer_sets (<=1024) at parse time in libavcodec/hevc/ps.c. The CVE's own affected-version range ("FFmpeg 8.0 through 8.1.2") is consistent with this. If this spec is ever bumped to >=8.0, this entry MUST be re-evaluated and likely converted into a real patch.
Bulletin has no description...
ECHO-F134-A339-73A5
Bulletin has no description...
ECHO-FCC4-5D8A-B7AF
Bulletin has no description...
ECHO-D56A-90B8-201C
Bulletin has no description...
ECHO-FAB7-82CE-9C15
Bulletin has no description...
ECHO-35B3-E206-4A0C
Bulletin has no description...
ECHO-6303-1FDB-ED48
Bulletin has no description...
ECHO-ED2D-C1B0-5E9E
Bulletin has no description...
ECHO-B1CD-45B4-EE8A
Bulletin has no description...
ECHO-2666-6303-C7A7
Bulletin has no description...
ECHO-B416-47AD-FA4D
Bulletin has no description...