CVE-2026-27629

InvenTree prior to v1.2.3 is affected by a server-side template vulnerability in batch code generation. A staff user can modify the customizable Jinja2 template used during batch code creation via the API; if another user triggers the API call, the template executes in their user context, potenti...

matrix-media-repo 代码问题漏洞

matrix-media-repo is a highly configurable multi-domain media repository for Matrix open source by t2bot.io. A code issue vulnerability exists in matrix-media-repo versions prior to v1.3.8 that stems from vulnerability to a server-side request forgery attack that, under certain conditions, serves...

Citrix Systems StoreFront Server Cross-Site Scripting Vulnerability

Citrix Systems StoreFront Server, a Citrix Systems company, is an integral component of Xen virtualization as part of the authentication and delivery management process. A cross-site scripting vulnerability exists in Citrix Systems StoreFront Server that stems from the presence of a cross-site...