NVD CVEs — 本日公開 (5 件)
CVE-2026-8723 5.3 MEDIUM
### Summary
`qs.stringify` throws `TypeError` when called with `arrayFormat: 'comma'` and `encodeValuesOnly: true` on an array containing `null` or `undefined`. The throw is synchronous and not handled by any of qs's null-related options (`skipNulls`, `strictNullHandling`).
### Details
In t
CVE-2026-8724 4.7 MEDIUM
A security flaw has been discovered in Dataease 2.10.20. Impacted is the function SqlparserUtils.transFilter of the file SqlparserUtils.java of the component Data Dashboard. The manipulation results in sql injection. The attack may be launched remotely. The exploit has been released to the public an
CVE-2026-8725 7.3 HIGH
A weakness has been identified in CoreWorxLab CAAL up to 1.6.0. The affected element is an unknown function of the file src/caal/webhooks.py of the component test-hass Endpoint. This manipulation causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been
CVE-2026-8719 8.8 HIGH
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Privilege Escalation in version 3.4.9. This is due to missing WordPress capability enforcement in the MCP OAuth bearer-token authorization path, where any valid OAuth token causes MCP access to be gra
CVE-2026-8728 4.3 MEDIUM
A security vulnerability has been detected in Open5GS up to 2.7.7. The impacted element is the function ogs_sbi_discovery_option_parse_plmn_list in the library /lib/sbi/conv.c of the component NRF. Such manipulation of the argument target-plmn-list leads to denial of service. The attack can be execu
GitHub Security Advisories — 本日公開 (4 件)
GHSA-988g-78qr-2cpm
MEDIUM
A weakness has been identified in CoreWorxLab CAAL up to 1.6.0. The affected element is an...
GHSA-74x6-944v-7pxp
LOW
A security flaw has been discovered in Dataease 2.10.20. Impacted is the function SqlparserUtils...
GHSA-rqcw-jqg3-qhwc
UNKNOWN
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
GHSA-5cv5-vm4q-7wmx
HIGH
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because...