477721 matches found
CVE-2026-71435 Statamic: Stored Cross-Site Scripting in Automagic Form Notification Email Template
Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.3 and 6.24.2, the default "automagic" form notification email rendered user-submitted values without escaping, allowing an unauthenticated form submitter to inject HTML into the notification emails sent to the...
CVE-2026-70559
Dinky's SysConfigController.getAll handler for GET /api/sysConfig/getAll carries a method-level @SaIgnore annotation that short-circuits the class-level @SaCheckLogin, so the Sa-Token interceptor lets the request through with no session or role check. Any remote unauthenticated caller who can rea...
CVE-2026-70559
Summary: Dinky v1.2.5 (and dev head) exposes an unauthenticated GET endpoint, /api/sysConfig/getAll, due to a method-level @SaIgnore bypassing class-level login checks. An unauthenticated remote user can retrieve the full live system configuration (54 entries on stock v1.2.5) with minimal GET. Th...
CVE-2026-70559 Dinky Unauthenticated System Configuration and Credential Disclosure via GET /api/sysConfig/getAll
Dinky's SysConfigController.getAll handler for GET /api/sysConfig/getAll carries a method-level @SaIgnore annotation that short-circuits the class-level @SaCheckLogin, so the Sa-Token interceptor lets the request through with no session or role check. Any remote unauthenticated caller who can rea...
CVE-2026-71434
CVE-2026-71434 affects Statamic (Laravel/Git-based CMS). Before version 5.74.3 and 6.24.2, public frontend forms did not enforce file upload restrictions that the Control Panel enforces, allowing an unauthenticated visitor to upload file types administrators disallow via assets/files fields. For ...
CVE-2026-71434 Statamic: Missing file upload validation on frontend forms allows uploading disallowed file types
Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.3 and 6.24.2, public frontend forms did not enforce the file upload restrictions that the Control Panel enforces, so an unauthenticated visitor could upload file types an administrator had intended to disallow...
CVE-2026-70558
Dinky CVE-2026-70558 affects the v1.2.5 release and development branch. The vulnerable component is the POST /download/uploadFromRsByLocal handler, which passes a caller-supplied path directly to new File(path) and file.transferTo(dest) with no path validation. The route is SaIgnore’d and /downlo...
CVE-2026-64662
Summary of CVE-2026-64662 (Statamic) : Statamic, a Laravel and Git powered CMS, had an issue where an authenticated Control Panel user could view content from entries they were not permitted to view, including entry content and custom field values, across any collection and including unpublished ...
CVE-2026-64665 Statamic: Account takeover via OAuth email matching without email-verification check
Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.1 and 6.24.0, when OAuth login was enabled with a provider that does not guarantee verified email addresses, an unauthenticated attacker could sign in as an existing user, potentially including a super admin, witho...
CVE-2026-71433
CVE-2026-71433 affects LangGraph checkpoint stores for Postgres and SQLite. Before 3.1.1, langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite persisted hierarchical namespaces as a dot-joined string and used a simple prefix match for reads, allowing an authenticated caller to access ite...
CVE-2026-48071 OpenReception's client PIN challenge throttle is keyed by emailHash only, allowing cross-tenant lockout
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.4, the PIN-type challenge throttle uses emailHash as the only key. The throttle rows live in the central challengethrottle table, which is shared across all tenants...
CVE-2026-48071
OpenReception's appointment booking software (prior to version 1.0.4) has a vulnerability in the PIN-type challenge throttle. The throttle uses emailHash as the single key, with throttle rows stored in a shared central challenge_throttle table across tenants. As a result, failing challenges in on...
CVE-2026-64655 GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values without escaping regex metacharacters, so a user-supplied repository or workflow name is...
CVE-2026-65400
CVE-2026-65400 is a pre-authentication/network-remote issue in macOS Screen Sharing. Affected: macOS Sequoia 15.7.9, Sonoma 14.8.9, Tahoe 26.6.1. Description: an authentication issue was fixed via improved state management, preventing unauthorized network authentication to Screen Sharing. Impact ...
CVE-2026-64653
CVE-2026-64653 affects GitHub CLI (gh) prior to version 2.97.0, where certain HTTP request URLs interpolated unescaped variable path components, enabling path traversal to targeted API endpoints or resources. The underlying issue is in how path components were incorporated into requests without p...
@cmmv/ai (0.0.5), @graphql-mesh/neo4j (>=0.103.0, <=0.106.2) +2 more potentially affected by CVE-2026-5423 via @neo4j/graphql (6.6.4)
@neo4j/graphql NPM version 6.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on @neo4j/graphql and may be impacted: - @cmmv/ai 0.0.5 - @graphql-mesh/neo4j =0.103.0, =0.7.13-alpha-20241031110808-e6f493d3529c46de0c7c0358ed1e2b5942f2a2a2, =0.7.0, =0.10.2...
CVE-2026-64677 Anki's local HTTP server is vulnerable to directory traversal attacks
Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, endpoints in Anki's local HTTP server do not adequately constrain requested media and built-in data paths, allowing scripts served from shared decks, or malicious websites combined with an origin-check bypass, to read loca...
CVE-2026-64677 Anki's local HTTP server is vulnerable to directory traversal attacks
Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, endpoints in Anki's local HTTP server do not adequately constrain requested media and built-in data paths, allowing scripts served from shared decks, or malicious websites combined with an origin-check bypass, to read loca...
CVE-2026-64677
Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, endpoints in Anki's local HTTP server do not adequately constrain requested media and built-in data paths, allowing scripts served from shared decks, or malicious websites combined with an origin-check bypass, to read loca...
