gha-lab-ca4fa82ac5

自动化研究产物 — 非上游项目。 本仓库是由自动化工具链为拉瓦尔大学（Université Laval）硕士论文构建的一次性实验环境，用于复现已发表的 GitHub Actions 工作流漏洞。它是 mesa/mesa 在提交 821c14475afebc6a68a45bb4b8e87be4d36a0c41（2026-03-04）时的逐字快照，依据该项目自身的许可证重新分发，该许可证文件已原样包含在本快照中。 上游项目未 参与其中，也从未 成为攻击目标，此处研究的漏洞已公开。本仓库中的每个密钥和变量均为随机生成的虚拟值——不存在任何真实凭据。操作引用和运行器镜像均固定为其在...

CVE-2024-41301-Bookea-tu-Mesa-is-vulnerable-to-Stored-Cross-Site-Scripting

CVE-2024-41301 - Bookea-tu-Mesa-is-vulnerable-to-Stored-Cross-Site-Scripting Bookea-tu-Mesa は、格納型クロスサイトスクリプティング（XSS）の脆弱性の影響を受けます。この欠陥により、攻撃者はユーザーのセッションのコンテキスト内で実行される悪意のあるスクリプトを注入できます。 再現手順: 1. http://localhost/Bookea-tu-Mesa/index.php に移動します。 2. Full Name に "" と入力して送信します。 3. スクリプトが実行され、XSS...

CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection

CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection- Bookea-tu-Mesa は SQL インジェクション SQLi の脆弱性の影響を受けます。この欠陥により、攻撃者はデータベースを操作できる悪意のある SQL コマンドを注入でき、アプリケーションのデータ整合性とセキュリティを損なう可能性があります。 再現手順: 1. http://localhost/Bookea-tu-Mesa/ReservationTable.php にアクセスします。 2. 検索フィールドに、次の SQL...

CVE-2026-98143

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Don't read the U65 rounding mode as a storage mode Bits 15:14 of NPUSETIFM,OFMPRECISION select the activation storage mode on U85 only. On U65 the same field holds the rounding mode, and the command stream parser h...

Linux Distros Unpatched Vulnerability : CVE-2026-97620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before...

EulerOS Virtualization 2.11.0 : mesa (EulerOS-SA-2026-3527)

According to the versions of the mesa packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated dat...

EulerOS Virtualization 2.11.1 : mesa (EulerOS-SA-2026-3440)

According to the versions of the mesa packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated dat...

Astra Linux – Vulnerability in Mesa

In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of data to be allocated depends on an untrusted party, and this data is then used for the alloca function...

Astra Linux – Vulnerability in Firefox and Thunderbird

The WebGL DrawElementsInstanced method was vulnerable to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...

The vulnerability of the Mesa video driver library, related to writing beyond the buffer boundaries, allows a hacker to cause a service failure.

The vulnerability of the Mesa video driver library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Photon OS 5.0: Mesa PHSA-2026-5.0-91-0833

An update of the mesa package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0833. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EulerOS Virtualization 2.10.0 : mesa (EulerOS-SA-2026-2860)

According to the versions of the mesa package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2741)

According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data...

EulerOS Virtualization 2.10.1 : mesa (EulerOS-SA-2026-2829)

According to the versions of the mesa package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data...

EulerOS Virtualization 2.12.0 : mesa (EulerOS-SA-2026-2787)

According to the versions of the mesa package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data...

EulerOS 2.0 SP10 : mesa (EulerOS-SA-2026-2703)

According to the versions of the mesa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an...

EulerOS 2.0 SP10 : mesa (EulerOS-SA-2026-2662)

According to the versions of the mesa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an...

[SECURITY] [DLA 4679-1] mesa security update

Debian LTS Advisory DLA-4679-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost July 13, 2026 https://wiki.debian.org/LTS Package : mesa Version : 20.3.5-1+deb11u1 $bookwormVERSION CVE ID : CVE-2026-40393 Debian Bug : A vulnerability has been found in the mesa 3D...

Debian dla-4679 : libd3dadapter9-mesa - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4679 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4679-1 [email protected] https://www.debian.org/lts/security/...

EulerOS 2.0 SP12 : mesa (EulerOS-SA-2026-2547)

According to the versions of the mesa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an...