آسیپ پذیری ها

CVE-2026-53663 – React Router: `handleDocumentRequest` CSRF check covers `POST` only; PUT/PATCH/DELETE bypass
بیشتر بخوانید »
CVE-2026-54299 – Astro: Host-header full-read SSRF in core prerendered error-page fetch (prerenderedErrorPageFetch default + unvalidated createRequestFromNodeRequest URL)
بیشتر بخوانید »
CVE-2026-54289 – Hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest
بیشتر بخوانید »
CVE-2026-54290 – Hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard
بیشتر بخوانید »
CVE-2026-10789 – MCP Extension Code Injection Vulnerability in Autodesk Fusion Desktop
بیشتر بخوانید »
CVE-2026-54286 – Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)
بیشتر بخوانید »
CVE-2026-54287 – Hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Lattice
بیشتر بخوانید »
CVE-2026-6062 – IDOR in Jira plugin subscription edit endpoint
بیشتر بخوانید »
CVE-2026-6673 – Mattermost Jira plugin had unauthenticated {{/ac/installed}} lifecycle callback during pending Jira Cloud install
بیشتر بخوانید »
CVE-2026-8074 – Improper Permission Check Allows User Manager to Deactivate Bot Accounts
بیشتر بخوانید »

صفحه قبلی صفحه بعدی