CVE-2026-115570 yüksek Electron: Mitigation for compromised eMudhra intermediate certificates en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-110975 yüksek autotune: kruize/autotune: kruize/autotune: Datasources credential disclosure en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-106069 yüksek nodejs: nodejs: TLS certificate hostname bypass via non-canonical IP hostnames en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-105482 yüksek nodejs: nodejs: dns.resolve truncates hostnames containing a NUL character en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-57845 yüksek datasets: datasets: Arbitrary code execution via insecure pickle deserialization en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-115478 yüksek obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-115477 yüksek obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-57210 yüksek Heimdall: IP Spoofing via Unvalidated Forwarding Headers en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-57209 yüksek Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-57146 yüksek PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-57144 yüksek PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-57142 yüksek PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-57121 yüksek PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-57117 yüksek PraisonAI: Compute-bridged file tools allow shell command injection en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-57114 yüksek PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-57113 yüksek PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-56840 yüksek PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-56838 yüksek PraisonAI recipe.run_stream skips dangerous-tool policy enforcement en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-56837 yüksek PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-56836 yüksek PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-56835 yüksek PraisonAI Slack app_mention bypasses configured user/channel authorization en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-56834 yüksek PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-56833 yüksek PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-56832 yüksek PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals en geç 24 Eki 2026 07:11 UTC derlemesi 23 Eki 2026 CVE-2026-114616 yüksek authlib: authlib: Authentication bypass via zero-length HMAC key en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-114615 yüksek authlib: Authlib: Authentication bypass via improper asymmetric key validation en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-115419 yüksek Strands Agents SDK: Exposure of data element to wrong session in the A2A Server en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-115504 yüksek cfitsio: cfitsio: arbitrary code execution via crafted FITS file en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-115374 yüksek github.com/lxc/incus: incus: Information disclosure via unsigned headers in presigned S3 URLs en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-115372 yüksek github.com/lxc/incus: Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-115355 yüksek mistune: mistune: Arbitrary file read via path traversal in Include directive en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-115352 yüksek mistune: mistune: Denial of Service via unmatched brackets in inline link parser en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-115349 yüksek mistune: mistune: Denial of Service via deeply nested square brackets en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-115348 yüksek mistune: mistune: Denial of Service via unbalanced brackets in link parser en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-115347 yüksek mistune: mistune: Denial of Service via unmatched square brackets en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-114613 yüksek msgpack: msgpack: Denial of Service via memory leak during map deserialization en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-75508 yüksek graphql-core: graphql-core: Denial of Service via token limit bypass using comments en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-75507 yüksek graphql-core: graphql-core: Denial of Service via nested inline fragments during query validation en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-114605 yüksek dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 GHSA-78g4-xqwv-q3g8 yüksek Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load() en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 GHSA-mrv2-3pqr-j5jr yüksek DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p) en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-94482 yüksek next: Next.js: Denial of Service via crafted requests targeting Server Actions en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 GHSA-pxh4-856f-4h89 yüksek PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-113872 yüksek multer: multer: Denial of Service via aborted request during asynchronous file filtering en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-111181 yüksek body-parser: body-parser: Denial of Service via unhandled decompression stream error en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-92709 yüksek rsyslog: rsyslog: Path traversal via unsanitized dynaFile templates en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-111497 yüksek brotli: Out-of-Bounds Write in Google Brotli Decoder en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-111079 yüksek goose: goose: Shell History and Environment Leak via Terminal Integration en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-112085 yüksek webpack-dev-server: webpack-dev-server: unauthorized backend access via unvalidated WebSocket proxy requests en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 CVE-2026-114730 yüksek roundcubemail: roundcubemail: Server-Side Request Forgery via address filter bypass en geç 24 Eki 2026 07:11 UTC derlemesi 22 Eki 2026 