Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization

Summary deserializeTypedArray casts the source node to ArrayBuffer without checking it and never bounds the element count. Pass a plain object with a length property and it hits the array-like TypedArray constructor, allocating that many elements. The offset guard above it can't stop this:...

OpenClaw: Channel read actions could skip target allowlists

Summary Channel read actions could skip target allowlists. In affected versions, explicit read targets in Microsoft Teams, Feishu, Matrix, and Google Chat could reach channels or rooms outside the configured read policy. This advisory is scoped to caller-supplied targets for message, reaction, pi...

GHSA-G7FW-3GJP-G5HF OpenClaw: Channel read actions could skip target allowlists

Summary Channel read actions could skip target allowlists. In affected versions, explicit read targets in Microsoft Teams, Feishu, Matrix, and Google Chat could reach channels or rooms outside the configured read policy. This advisory is scoped to caller-supplied targets for message, reaction, pi...

EUVD-2026-75637

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs...

GHSA-8FXW-FMJ8-XP7J MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

Impact Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

Impact Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values

Summary fast-copy traverses values recursively with no bound on depth. Copying a sufficiently deeply-nested value exhausts the JavaScript call stack and throws a native RangeError: Maximum call stack size exceeded from inside the library. Details Both copy and copyStrict recurse once per level of...

GHSA-JGGR-W7FW-PC2J fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values

Summary fast-copy traverses values recursively with no bound on depth. Copying a sufficiently deeply-nested value exhausts the JavaScript call stack and throws a native RangeError: Maximum call stack size exceeded from inside the library. Details Both copy and copyStrict recurse once per level of...

Langflow: Weak Fernet Key via random.seed()

Summary Langflow uses Python's random module Mersenne Twister, a non-cryptographic PRNG seeded with the SECRETKEY to derive the Fernet encryption key for all stored user credentials API keys, LLM provider secrets, database passwords. When the SECRETKEY is shorter than 32 characters — a common...

GHSA-JXW3-MJMX-3PQM Langflow: Weak Fernet Key via random.seed()

Summary Langflow uses Python's random module Mersenne Twister, a non-cryptographic PRNG seeded with the SECRETKEY to derive the Fernet encryption key for all stored user credentials API keys, LLM provider secrets, database passwords. When the SECRETKEY is shorter than 32 characters — a common...

GHSA-CF6M-VC3M-7CGM Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass

Summary A vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the WEBHOOKAUTHENABLE configuration is set to False. This allows a remote attacker who knows a flow's UUID ...

Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass

Summary A vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the WEBHOOKAUTHENABLE configuration is set to False. This allows a remote attacker who knows a flow's UUID ...

CVE-2026-103546 Improper validation of Ops Manager configuration in MongoDB Kubernetes Operator

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation...

CVE-2026-103546 Improper validation of Ops Manager configuration in MongoDB Kubernetes Operator

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation...

CVE-2026-103546 Improper validation of Ops Manager configuration in MongoDB Kubernetes Operator

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation...

CVE-2026-40860

camel-jms — Reproductor de deserialización insegura de JMS ObjectMessage CVE-2026-40860 Este proyecto demuestra una vulnerabilidad de deserialización en Java en el componente camel-jms de Apache Camel y, de forma transitiva, en camel-sjms, camel-sjms2, camel-amqp, camel-activemq, camel-activemq6,...

Improper validation of Ops Manager configuration in MongoDB Kubernetes Operator

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation...

keycloak__keycloak_CVE-2014-3656_1-0-5-Final

Gestión de identidad y acceso de código abierto Añada autenticación a las aplicaciones y proteja los servicios con el mínimo esfuerzo. No hay que ocuparse de almacenar usuarios ni de autenticarlos. Keycloak proporciona federación de usuarios, autenticación sólida, gestión de usuarios, autorizació...

CVE-2024-51482

CVE-2024-51482 - ZoneMinder 盲 SQL 注入 目录 概述 漏洞详情 技术分析 利用指南 安装 使用示例 缓解措施 参考 概述 CVE-2024-51482 是 ZoneMinder（一款流行的开源闭路电视监控软件）中发现的一个严重基于布尔的 SQL 注入漏洞。该漏洞影响 1.37. 至 1.37.64 版本，允许具有低权限的已认证攻击者在底层数据库服务器上执行任意 SQL 命令。 指标| 值 ---|--- CVE ID| CVE-2024-51482 CVSS 评分| 9.9（严重） 攻击向量| 网络 所需权限| 低 用户交互| 无 影响范围| 已改变 影响...

CVE-2026-43866

camel-jms: Reproductor de omisión de filtro con DefaultExchangeHolder forjado CVE-2026-43866 Este proyecto demuestra la CVE-2026-43866 , una omisión bypass de la corrección de la CVE-2026-40860 en los componentes camel-jms y camel-sjms / familia JMS de Apache Camel. La CVE-2026-40860 añadió una...