CVE-2026-49837 GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP OPEN capability parsing issue where several concrete capability decoders may parse data from the full remaining capability buffer instead of the slice bounded b...

CVE-2026-49837 GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP OPEN capability parsing issue where several concrete capability decoders may parse data from the full remaining capability buffer instead of the slice bounded b...

mistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url

Summary mistral.rs fetches any request-supplied image/audio URL with no host or IP validation, and opens arbitrary local files a file:// URL, or any existing relative/absolute path. A remote, unauthenticated client of any vision/audio deployment can cause the server to issue requests to internal ...

CVE-2026-54054 Transmute has full-read SSRF in URL file import (POST /api/files/url) — no host/IP validation, follows redirects

Transmute is a free, open-source, self-hosted file conversion and compression tool. Prior to version 1.3.0, Transmute's URL import endpoint, POST /api/files/url, is vulnerable to Server-Side Request Forgery SSRF. The HTTP downloader used by this endpoint fetches user-supplied URLs with redirects...

CVE-2026-54054

Transmute is a free, open-source, self-hosted file conversion and compression tool. Prior to version 1.3.0 , its URL import endpoint (POST /api/files/url) is vulnerable to full-read SSRF . The HTTP downloader fetches user-supplied URLs with redirects enabled and does not validate whether the targ...

CVE-2026-54054 Transmute has full-read SSRF in URL file import (POST /api/files/url) — no host/IP validation, follows redirects

Transmute is a free, open-source, self-hosted file conversion and compression tool. Prior to version 1.3.0, Transmute's URL import endpoint, POST /api/files/url, is vulnerable to Server-Side Request Forgery SSRF. The HTTP downloader used by this endpoint fetches user-supplied URLs with redirects...

CVE-2026-49836

psd-tools (Python library for Adobe Photoshop PSD files) is vulnerable to arbitrary file write and arbitrary file read via unsanitized smart-object paths. In all releases through v1.17.0 , SmartObject.save() uses the embedded filename from the PSD verbatim—no basename, no .. filtering, no absolut...

CVE-2026-49836 psd-tools: arbitrary file write via smart-object filename

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...

CVE-2026-79725 Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to improper access control...

CVE-2026-79725

IBM Langflow OSS versions 1.0.0 through 1.11.5 are affected by an improper access control flaw (CWE-284 ) that allows a remote authenticated attacker to read arbitrary files. The vulnerability is part of a broader set of storage-path issues: the flow execution runtime accepts attacker-controlled ...

CVE-2026-21857

CVE-2026-21857：Redaxo 备份插件存在路径遍历漏洞，可导致任意文件读取 概述 字段| 详情 ---|--- CVE ID| CVE-2026-21857 严重级别| 高危 安全公告| 查看公告 发现者| Lukasz Rybak 受影响产品 redaxo/source （版本：= 5.20.1） CWE 分类 CWE-22：对受限目录的路径名限制不当（'路径遍历'） CWE-24：路径遍历：'../filedir' 详细信息 摘要 拥有备份权限的已认证用户可通过备份插件文件导出功能中的路径遍历漏洞，读取 Web 根目录内的任意文件。 详情 备份插件未将 EXPDIR...

CVE-2026-9225

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component. When executing flows through the /api/v1/run/advanced/flowid endpoint, the application allows...

CVE-2026-79592

An out-of-bounds read vulnerability exists in the xlsdumpSummary function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets...

DEBIAN-CVE-2026-79592

An out-of-bounds read vulnerability exists in the xlsdumpSummary function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets...

n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

Impact The Git node validated the repository that a fetch or pull targeted, but setUpstream wrote a branch..remote value into the repository's own configuration without validating it. A subsequent fetch or pull resolved the remote from that configuration rather than from the checked parameter, so...

GHSA-QGPW-8G46-W95V n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

Impact The Git node validated the repository that a fetch or pull targeted, but setUpstream wrote a branch..remote value into the repository's own configuration without validating it. A subsequent fetch or pull resolved the remote from that configuration rather than from the checked parameter, so...

NPM: n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

NPM: n8n: Git Node branch..remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read vulnerability discovered by ? in WordPress Npm n8n versions 1.123.76...

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 是 Apache Tomcat 中发现的一个严重远程代码执行（RCE）漏洞 影响那些启用了HTTP PUT的系统（通过将Default servlet的“read-only”初始化参数设置为“false”）受到威胁。 在9.0.1（Beta）、8.5.23、8.0.47和7.0.82之前的Tomcat版本中，如果默认servlet配置了参数readonly设置为false，或者WebDAV servlet启用了参数readonly设置为false，则所有操作系统上都会存在一个潜在危险的远程代码执行（RCE）漏洞。 Apache...

CVE-2021-29447

CVE-2021-29447 - WordPress XXE Vulnerability Exploit Description This repository contains an exploit for CVE-2021-29447, an XXE XML External Entity vulnerability present in WordPress 5.7.0 and earlier versions. The vulnerability exists in the media library that processes WAV files, allowing an...

EUVD-2026-75723

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component. When executing flows through the /api/v1/run/advanced/flowid endpoint, the application allows...