72433 matches found
ECHO-4429-8097-B109
Bulletin has no description...
ECHO-C8E7-731E-B0F8
Bulletin has no description...
ECHO-1888-E250-4427
Bulletin has no description...
GHSA-M9RG-MR6G-75GM vulnerabilities
Vulnerabilities for packages: tensorflow-cpu-jupyter, py3-jupyterlab...
GHSA-95FC-G4GJ-MQMX vulnerabilities
Vulnerabilities for packages: rancher...
CVE-2026-58580
LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginState, updatePluginError, updateTTS and updateTranslate methods filter target rows by message id alone, omitting the userId scope that sibli...
CVE-2026-7311
creationtimestamp| type| source ---|---|--- 2026-07-02 20:16:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpotyblujl2q 2026-07-02 22:03:09+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpozwmi2ca2g 2026-07-03 12:16:06+00:00| seen|...
MINI-QJWX-FR7P-26M4
Bulletin has no description...
MINI-JW73-CPXF-MMMQ
Bulletin has no description...
MINI-W673-C5G4-9VXF
Bulletin has no description...
MINI-VP8M-4V54-HHJJ
Bulletin has no description...
CVE-2026-58580 LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes
LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginState, updatePluginError, updateTTS and updateTranslate methods filter target rows by message id alone, omitting the userId scope that sibli...
CVE-2026-58580 LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes
LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginState, updatePluginError, updateTTS and updateTranslate methods filter target rows by message id alone, omitting the userId scope that sibli...
CVE-2026-58580 LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes
LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginState, updatePluginError, updateTTS and updateTranslate methods filter target rows by message id alone, omitting the userId scope that sibli...
CVE-2026-58580
LobeChat up to version 2.2.9 is affected by broken object-level authorization in MessageModel. An authenticated user who knows another user’s non-enumerable message identifier can overwrite that victim’s plugin tool‑call metadata, plugin state/error, and TTS/translation records via tRPC message p...
MINI-FC8Q-99CM-3C68
Bulletin has no description...
MINI-MWJW-JP43-4FQ4
Bulletin has no description...
MINI-M7VC-X936-JFH8
Bulletin has no description...