CVE-2026-27629

InvenTree CVE-2026-27629 is a Server-Side Template Injection (SSTI) in PART_NAME_FORMAT prior to 1.2.3. A staff member with settings access could modify a jinja2 template used during batch code generation; after validation, this template could be used by other users to exfiltrate data or execute ...

matrix-media-repo 代码问题漏洞

matrix-media-repo is a highly configurable multi-domain media repository for Matrix open source by t2bot.io. A code issue vulnerability exists in matrix-media-repo versions prior to v1.3.8 that stems from vulnerability to a server-side request forgery attack that, under certain conditions, serves...

Citrix Systems StoreFront Server Cross-Site Scripting Vulnerability

Citrix Systems StoreFront Server, a Citrix Systems company, is an integral component of Xen virtualization as part of the authentication and delivery management process. A cross-site scripting vulnerability exists in Citrix Systems StoreFront Server that stems from the presence of a cross-site...