{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "ResoArc SWWW",
  "home_page_url": "https://resoarc.com/security/weather/",
  "feed_url": "https://resoarc.com/api/v1/swww/feed.json",
  "description": "公開の脆弱性情報と技術タグ。ResoArc製品への影響を示すものではありません。",
  "items": [
    {
      "id": "GHSA-332p-7hrc-92wf",
      "url": "https://github.com/advisories/GHSA-332p-7hrc-92wf",
      "title": "Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO",
      "summary": "``` ============================================================================ Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO Location: src/libImaging/TiffDecode.c:94 in _tiffWriteProc() Commit: a707c6b21c313880d0771e54965d142dd42358b6 ==========================================",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Python"
      ]
    },
    {
      "id": "GHSA-f2ph-cmg5-wxc8",
      "url": "https://github.com/advisories/GHSA-f2ph-cmg5-wxc8",
      "title": "Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites",
      "summary": "**Summary:** A malicious website may be able to cause unauthorized file changes in a developer’s project while an affected Storybook development server is running. Under additional conditions, a changed file could be executed by a local runtime with the developer’s privileges. We are not aware of ex",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "GHSA-w889-685w-c8fh",
      "url": "https://github.com/advisories/GHSA-w889-685w-c8fh",
      "title": "Pillow: Argument Injection in Ghostscript call, potentially leading into RCE",
      "summary": "### Summary `PIL.EpsImagePlugin.Ghostscript()` builds the Ghostscript command line using the input file path (`fp.name`) **without sanitization**, placing it at `-f <infile>`. A filename beginning with `-` is interpreted by Ghostscript as an option, giving command-line argument injection; chainable",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Python"
      ]
    },
    {
      "id": "CVE-2026-110264",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110264",
      "title": "An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9,",
      "summary": "An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to exec",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "GitLab"
      ]
    },
    {
      "id": "CVE-2026-114575",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114575",
      "title": "A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste_modules/pro",
      "summary": "A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste_modules/product.so. Executing a manipulation of the argument FileMd5 can lead to command injection. The attack can be launched remotely. The exploit has bee",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114661",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114661",
      "title": "OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any authenticated user to start, stop a",
      "summary": "OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any authenticated user to start, stop and query gateway tunnels without an administrative role. Attackers can send POST or DELETE requests to the gateway tunnel endpoint to open persis",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "GHSA-22hg-r758-rrw9",
      "url": "https://github.com/advisories/GHSA-22hg-r758-rrw9",
      "title": "Pillow: Infinite loop in MIC n_frames when the embedded TIFF",
      "summary": "``` ============================================================================ Infinite loop in MIC n_frames when the embedded TIFF has 3+ IFDs Location: src/PIL/MicImagePlugin.py:86 in MicImageFile.tell() Commit: a707c6b21c313880d0771e54965d142dd42358b6 ===========================================",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Python"
      ]
    },
    {
      "id": "GHSA-27h8-gf7j-v5hc",
      "url": "https://github.com/advisories/GHSA-27h8-gf7j-v5hc",
      "title": "Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images",
      "summary": "``` ============================================================================ NULL dereference in ImagingExpand via rank filters on zero-size images Location: src/libImaging/Filter.c:79 in ImagingExpand() Commit: a707c6b21c313880d0771e54965d142dd42358b6 ===========================================",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Python"
      ]
    },
    {
      "id": "GHSA-46r4-q7wv-32fc",
      "url": "https://github.com/advisories/GHSA-46r4-q7wv-32fc",
      "title": "OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs",
      "summary": "## Summary The OpenChoreo API server authorized `PUT .../workflowruns/{runName}` against ownership metadata taken from the request body, while the object it actually mutated was selected by the URL path. Nothing forced the two to agree. A `WorkflowRun`'s membership in a project and component is carr",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "GHSA-5588-rp99-5fjh",
      "url": "https://github.com/advisories/GHSA-5588-rp99-5fjh",
      "title": "Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization",
      "summary": "Exclusive XML canonicalization (`http://www.w3.org/2001/10/xml-exc-c14n#`) in `github.com/moov-io/signedxml` copied the entire accumulated namespace map at every node during `ValidateReferences()`, before any reference digest or signature check. For a chain of nested elements that each declare many",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "GHSA-5vjq-rrrf-7h2q",
      "url": "https://github.com/advisories/GHSA-5vjq-rrrf-7h2q",
      "title": "virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST",
      "summary": "### Impact zsh users activate an environment with the bash `activate` script, which puts the environment name into `PS1`. Since 21.13.0 the script escapes backslashes, dollar signs and backticks in that name, but only when `BASH_VERSION` is set, so zsh gets the raw value. With the `PROMPT_SUBST` opt",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "GHSA-5xm2-6676-qcp9",
      "url": "https://github.com/advisories/GHSA-5xm2-6676-qcp9",
      "title": "Pillow: APNG background disposal allocates full canvas before decompression bomb check",
      "summary": "``` ============================================================================ APNG background disposal allocates full canvas before decompression bomb check Location: src/PIL/PngImagePlugin.py:1000 in PngImageFile._seek() Commit: a707c6b21c313880d0771e54965d142dd42358b6 ==========================",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Python"
      ]
    },
    {
      "id": "GHSA-7mwm-ghpf-9vrm",
      "url": "https://github.com/advisories/GHSA-7mwm-ghpf-9vrm",
      "title": "Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform",
      "summary": "``` ============================================================================ Double free in ImagingScaleAffine on calloc failure via Image.transform Location: src/libImaging/Geometry.c:866 in ImagingScaleAffine() Commit: a707c6b21c313880d0771e54965d142dd42358b6 ==================================",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Python"
      ]
    },
    {
      "id": "GHSA-8rjx-v5ww-45pp",
      "url": "https://github.com/advisories/GHSA-8rjx-v5ww-45pp",
      "title": "virtualenv activation scripts run code from a path that contains a placeholder name",
      "summary": "### Impact `ViaTemplateActivator.instantiate_template` replaces the placeholders in an activation template one key at a time, each across the whole text. When a value that it already substituted and quoted contains the name of a later placeholder, the later pass rewrites that name inside the quoted",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "GHSA-c947-3pg5-gm8q",
      "url": "https://github.com/advisories/GHSA-c947-3pg5-gm8q",
      "title": "virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote",
      "summary": "### Impact `FishActivator` defines no `quote()`, so it inherits `ViaTemplateActivator.quote`, which returns `shlex.quote(string)`. That function follows POSIX `sh` rules, where a backslash inside single quotes stays a literal character. fish reads `\\'` inside single quotes as an escaped quote and `\\",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "GHSA-c978-59m8-c77v",
      "url": "https://github.com/advisories/GHSA-c978-59m8-c77v",
      "title": "virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax",
      "summary": "## Summary A destination path supplied to virtualenv can be interpreted as shell syntax by a generated POSIX console launcher. The app-data seeder and pip delegate launcher generation to distlib but supply the interpreter path in a form that does not preserve it as literal data in the shell wrapper.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "GHSA-cp9v-662q-vvx9",
      "url": "https://github.com/advisories/GHSA-cp9v-662q-vvx9",
      "title": "Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0",
      "summary": "### Summary `Image.merge()` checks the mode of every input band except band 0. If band 0 is a single-band `I` or `F` image, the native merge routine reads a pixel pointer that is NULL for those modes and the process crashes. The IPTC plugin reaches this from a plain `Image.open()` followed by a load",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Python"
      ]
    },
    {
      "id": "GHSA-f2g6-542v-9j58",
      "url": "https://github.com/advisories/GHSA-f2g6-542v-9j58",
      "title": "Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle",
      "summary": "``` ============================================================================ Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle Location: src/PIL/PdfParser.py:505 in PdfParser.rewrite_pages() Commit: a707c6b21c313880d0771e54965d142dd42358b6 =======================================",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Python"
      ]
    },
    {
      "id": "GHSA-gg2r-wvfm-q9rx",
      "url": "https://github.com/advisories/GHSA-gg2r-wvfm-q9rx",
      "title": "Pillow: MSP RLE decoder expands a tiny file into unbounded memory",
      "summary": "### Summary The MSP RLE decoder expands run-length data into an in-memory buffer with no cap tied to the declared image size. A small file that passes the pixel-count check can force hundreds of megabytes or more of allocation when the application loads pixels. ### Details The MSP decoder writes eac",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Python"
      ]
    },
    {
      "id": "GHSA-j4m9-6w36-pw47",
      "url": "https://github.com/advisories/GHSA-j4m9-6w36-pw47",
      "title": "Pillow: Invalid free in FreeType glyph rendering when a stroker is active",
      "summary": "### Summary When text is drawn with a non-zero stroke width, Pillow creates a FreeType stroker and then loads each glyph. If `FT_Load_Glyph` fails for a glyph, the cleanup path calls `FT_Done_Glyph` on the `glyph` variable. That variable is not initialized before the first measurement loop, and in t",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Python"
      ]
    },
    {
      "id": "GHSA-jg86-v3jv-hrpm",
      "url": "https://github.com/advisories/GHSA-jg86-v3jv-hrpm",
      "title": "Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)",
      "summary": "``` ============================================================================ Quadratic-time DoS in PDF save_all (PdfParser.next_object_id) Location: src/PIL/PdfParser.py:629 in next_object_id() Commit: a707c6b21c313880d0771e54965d142dd42358b6 =====================================================",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Python"
      ]
    },
    {
      "id": "GHSA-vxj4-q4g9-crj7",
      "url": "https://github.com/advisories/GHSA-vxj4-q4g9-crj7",
      "title": "virtualenv bash activate runs commands from an environment name with a backslash before $",
      "summary": "### Summary The bash `activate` script escapes the environment name for only one of the two passes bash makes over `PS1`, so a backslash in the name undoes the escaping and a name containing `\\$(...)` runs as commands in the user's shell each time bash draws the prompt. ### Affected area `src/virtua",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "GHSA-xvh5-g6gv-559v",
      "url": "https://github.com/advisories/GHSA-xvh5-g6gv-559v",
      "title": "Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags",
      "summary": "``` ============================================================================ Memory disclosure and segfault in libtiff encoder via crafted TIFF tags Location: src/encode.c:1014 in PyImaging_LibTiffEncoderNew() Commit: a707c6b21c313880d0771e54965d142dd42358b6 =====================================",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Python"
      ]
    },
    {
      "id": "CVE-2026-112212",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112212",
      "title": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certa",
      "summary": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have poisoned a shared cache's OAuth/OIDC discovery document to redirect certain flows to an externa",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "GitLab"
      ]
    },
    {
      "id": "CVE-2026-15723",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15723",
      "title": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when OmniAu",
      "summary": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when OmniAuth SAML and LDAP auto-linking were both enabled, an authenticated user could have taken over an existing LDAP-backed account without any interact",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "GitLab"
      ]
    },
    {
      "id": "CVE-2026-114633",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114633",
      "title": "WWBN AVideo before 29.4.0 contains an incorrect authorization vulnerability that allows delegated Users Admin accounts to delete or modify administrator ac",
      "summary": "WWBN AVideo before 29.4.0 contains an incorrect authorization vulnerability that allows delegated Users Admin accounts to delete or modify administrator accounts. Attackers can submit requests to confirmDeleteUser.json.php or userAddNew.json.php targeting administrators to delete their videos and ac",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114635",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114635",
      "title": "Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil. Unaut",
      "summary": "Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil. Unauthenticated clients can send HTTP/2 requests with the :scheme http pseudo-header over TLS on Go 1.27 builds to reach routers requiring client cert",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114636",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114636",
      "title": "Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTTP router generated for ssl-passthro",
      "summary": "Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTTP router generated for ssl-passthrough Ingresses on non-TLS entry points never applies the Ingress's access-control annotations. Unauthenticated attackers reaching the HTTP entry p",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Kubernetes",
        "NGINX"
      ]
    },
    {
      "id": "CVE-2026-114637",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114637",
      "title": "Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy connection pool, which fails to pin NTLM/N",
      "summary": "Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy connection pool, which fails to pin NTLM/Negotiate-authenticated backend connections to their frontend connection. Unauthenticated clients can be handed a pooled keep-alive backend connec",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114638",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114638",
      "title": "Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGINX provider that merges client CAs when auth-t",
      "summary": "Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGINX provider that merges client CAs when auth-tls-secret names collide after dot-to-dash normalization. Attackers holding certificates from another host's CA can access a host requiring its ow",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Kubernetes",
        "NGINX"
      ]
    },
    {
      "id": "CVE-2026-114639",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114639",
      "title": "Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass because a first request preauthenticated with an Authorization: Neg",
      "summary": "Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass because a first request preauthenticated with an Authorization: Negotiate token authenticates a socket in the globally shared backend connection pool, which is never isolated. Unauthenticated attackers on separat",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114640",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114640",
      "title": "Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provider that forwards client-supplied S",
      "summary": "Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provider that forwards client-supplied Ssl-Client-* headers on the plaintext HTTP router. When ssl-redirect is disabled alongside auth-tls-pass-certificate-to-upstream, unauthenticated ",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Kubernetes",
        "NGINX"
      ]
    },
    {
      "id": "CVE-2026-114642",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114642",
      "title": "Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend round tripper in a client-connection slot not keyed by ServersTransp",
      "summary": "Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend round tripper in a client-connection slot not keyed by ServersTransport, so one service's TLS client configuration is reused for another service's backend. An unauthenticated client can arm the slot via a backend ",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114658",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114658",
      "title": "Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that allows page authors to obtain super",
      "summary": "Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that allows page authors to obtain super user accounts. Attackers can define an invitation form granting super access in page frontmatter, submit it unauthenticated, and register the in",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114659",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114659",
      "title": "Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic /api/v1/flex-objects/pages API routes check only director",
      "summary": "Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic /api/v1/flex-objects/pages API routes check only directory-level admin.pages permissions, without enforcing the Pages API's api.pages.read/write permissions or page-level permissions rules. Authenticate",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114660",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114660",
      "title": "Grav from 2.0.0 before 2.2.5 contains an improper access control vulnerability in FlexDirectory::dynamicFlexField() that allows page authors to call arbitr",
      "summary": "Grav from 2.0.0 before 2.2.5 contains an improper access control vulnerability in FlexDirectory::dynamicFlexField() that allows page authors to call arbitrary Flex object methods via flex-*@ directives in page frontmatter. When a user with page edit rights opens the page, directives calling setStora",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114662",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114662",
      "title": "Obot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow that allows unauthenticated attackers to steal API keys by choosin",
      "summary": "Obot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow that allows unauthenticated attackers to steal API keys by choosing token request IDs. Attackers can create a token request via POST /api/token-request, send the login link to a signed-in user, and fetch the res",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114663",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114663",
      "title": "Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, because parse_Name resolves their names",
      "summary": "Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, because parse_Name resolves their names in the using function's scope rather than at declaration. When a contract's parameter, local, or loop variable shares such a name, attacker-infl",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114664",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114664",
      "title": "Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk.doctype.event.event.get_events method, which fails to prope",
      "summary": "Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk.doctype.event.event.get_events method, which fails to properly neutralize user-supplied input before including it in SQL queries. Authenticated attackers can send crafted input to get_events and infer que",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114716",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114716",
      "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail::extract_inline_images() used",
      "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail::extract_inline_images() used the media type taken from an inline image data URI without validating it, so a remote authenticated attacker could inject arbitrary MIME part hea",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114720",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114720",
      "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability. A remote authenticated attacker can exploit",
      "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability. A remote authenticated attacker can exploit this via CRLF sequences injected into the _flag parameter of the mail/mark action to execute arbitrary IMAP commands. Upstream fixed this in the ",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114724",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114724",
      "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserialize(). A session key prefixed with",
      "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserialize(). A session key prefixed with “!” was treated as having no value, and the reconstructed serialized string was emitted with a key but no corresponding value, desynchronizing th",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114727",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114727",
      "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing images. SVG and EPS were accepted a",
      "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing images. SVG and EPS were accepted as valid image types for contact photo upload and conversion, and both formats can reference external resources and invoke ImageMagick delegates w",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-110353",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110353",
      "title": "HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING f",
      "summary": "HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING frame. h2c_handle_ping in src/mux_h2.c does not check for a short read, unlike the other H2 frame handlers. Because the incomplete frame cannot be",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-110354",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110354",
      "title": "HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chun",
      "summary": "HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream, the parser repeatedly re-processes the same bytes without ",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114730",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114730",
      "title": "Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass. The network blocklist used by rcu",
      "summary": "Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass. The network blocklist used by rcube_utils::is_local_url() omitted the RFC 6052 NAT64 prefix 64:ff9b::/96, the RFC 8215 local-use NAT64 prefix 64:ff9b:1::/48 and the unspecified a",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-103515",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-103515",
      "title": "GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when an instan",
      "summary": "GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when an instance administrator locked a group's Duo availability, an authenticated user with group Owner permissions could have re-enabled AI-backed data egres",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "GitLab"
      ]
    },
    {
      "id": "CVE-2026-105711",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105711",
      "title": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merg",
      "summary": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a confidential issue from a private project, an authenticated user with no project membership could have",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "GitLab"
      ]
    },
    {
      "id": "CVE-2026-105777",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105777",
      "title": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under cer",
      "summary": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have retrieved sensitive internal server credentials due to improper filtering of internal respons",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "GitLab"
      ]
    },
    {
      "id": "CVE-2026-112326",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112326",
      "title": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain",
      "summary": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with read-only permissions to permanently delete existing vulnerability records due to impro",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "GitLab"
      ]
    },
    {
      "id": "CVE-2026-112378",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112378",
      "title": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain c",
      "summary": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid AI features without a valid subscription due to insufficient server-side valida",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "GitLab"
      ]
    },
    {
      "id": "CVE-2026-114574",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114574",
      "title": "A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component",
      "summary": "A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclos",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114714",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114714",
      "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail_usercopy plugin. With the file bas",
      "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail_usercopy plugin. With the file based backend, the source path was built from the login name without rejecting path separators, so a login name containing a slash could cause files",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-12664",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12664",
      "title": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certa",
      "summary": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with a read_api-scoped token to retrieve a project's incoming email address and create wo",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "GitLab"
      ]
    },
    {
      "id": "CVE-2026-13319",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13319",
      "title": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have",
      "summary": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have allowed an authenticated to read milestone metadata, including titles, descriptions, and full project paths, from arbitrary private projects acr",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "GitLab"
      ]
    },
    {
      "id": "CVE-2026-14288",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14288",
      "title": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain c",
      "summary": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a required merge request approval policy on a protected branch due to improper access con",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "GitLab"
      ]
    },
    {
      "id": "CVE-2026-16255",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16255",
      "title": "GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the insta",
      "summary": "GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the instance-wide SAML or LDAP membership lock was enabled, an authenticated user could have granted or accepted project and group membership outside the ",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "GitLab"
      ]
    },
    {
      "id": "CVE-2026-114576",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114576",
      "title": "A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The manipulation o",
      "summary": "A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The manipulation of the argument session_id leads to insufficiently random values. The attack may be initiated remotely. The complexity of an attack is rather high",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114577",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114577",
      "title": "A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/insert.php of the component Inse",
      "summary": "A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/insert.php of the component Insertion Handler. The manipulation of the argument costomer_id/payment_type/amount/description/user/uploadimage/full_name/visa_no results in sql inj",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "PHP"
      ]
    },
    {
      "id": "CVE-2026-114634",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114634",
      "title": "WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL() because get_headers() follows redirec",
      "summary": "WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL() because get_headers() follows redirects without re-validating targets with isSSRFSafeURL(). Authenticated uploaders can store a videoLink pointing to a redirector, causing internal G",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114641",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114641",
      "title": "Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos (Negotiate) backend authentication, where the per-connec",
      "summary": "Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos (Negotiate) backend authentication, where the per-connection sticky round tripper slot is read and written without synchronization. Remote attackers can send concurrent HTTP/2 or HTTP/3 requests over o",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114656",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114656",
      "title": "Traefik before 2.11.58 and 3.7.13 contains an authentication bypass vulnerability that allows unauthenticated clients to skip client-certificate checks bec",
      "summary": "Traefik before 2.11.58 and 3.7.13 contains an authentication bypass vulnerability that allows unauthenticated clients to skip client-certificate checks because negated Host matchers are counted as served domains. Attackers can reach backends protected by RequireAndVerifyClientCert when a router rule",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114657",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114657",
      "title": "Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows page authors to capture visitors' HTTP Basic credentials through",
      "summary": "Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows page authors to capture visitors' HTTP Basic credentials through Twig page content. Authors can print the request Uri object, which embeds PHP_AUTH_USER and PHP_AUTH_PW, inside an inline style background image ",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114715",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114715",
      "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Modoboa driver of the password plugin",
      "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Modoboa driver of the password plugin. The driver took the first entry of the account search result returned by the Modoboa API instead of matching the authenticated user, so a passw",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114717",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114717",
      "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a message is forwarded as an attachment. T",
      "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a message is forwarded as an attachment. The subject of the forwarded message was used verbatim to generate the attachment name, so a received message whose subject contains CRLF sequence",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114718",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114718",
      "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the password plugin. Error text returned by a",
      "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the password plugin. Error text returned by a password driver was concatenated into the message presented to the user without HTML escaping, so a backend able to influence that text, such as",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114719",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114719",
      "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk action of the markasjunk plugin. The plu",
      "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk action of the markasjunk plugin. The plugin read the _uid parameter from POST data but passed it to rcmail::get_uids() without constraining the input mode, so values re-read inside that",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114721",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114721",
      "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be bypassed. The check compared only the action",
      "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be bypassed. The check compared only the action name as requested, so a remote authenticated attacker could reach an action listed in disabled_actions by requesting it through its deprecated a",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114722",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114722",
      "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube_utils::mod_css_styles() did not treat an",
      "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube_utils::mod_css_styles() did not treat an at-rule prologue such as @layer a; as a selector boundary, and did not handle selectors beginning with ::, so selectors following an at-rule wer",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114723",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114723",
      "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcube_image",
      "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcube_image falls back to GD, the available-memory check was applied only on Windows, so on other platforms a crafted image with large dimensions was process",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114725",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114725",
      "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail stripped newline characters on",
      "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail stripped newline characters only from the Subject and Organization headers, leaving other header values taken from request parameters unsanitized, so a remote authenticated at",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114726",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114726",
      "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce (resend) action. rcube_mime::deco",
      "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce (resend) action. rcube_mime::decode_address_list() did not strip control characters from the decoded display name, so a received message whose From display-name carries CRLF sequ",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-114728",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114728",
      "title": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling of FuncIRI attributes. rcube_washtml",
      "summary": "Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling of FuncIRI attributes. rcube_washtml detected the CSS url() token with a pattern that enumerated only some of its escaped spellings, so values using other CSS escape sequences, for ",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": []
    },
    {
      "id": "CVE-2026-16648",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16648",
      "title": "Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Stolen Credentials. This issue affects",
      "summary": "Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Stolen Credentials. This issue affects Mailer Plus Log versions: from 0.0.0 to 1.2.7.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-81163",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81163",
      "title": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Importer allows Path Traversal. This i",
      "summary": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Importer allows Path Traversal. This issue affects Media Library Importer versions: from 0.0.0 to 2.1.6.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-84910",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84910",
      "title": "Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Search versions: from 0.0.0 to 2.4.5.",
      "summary": "Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Search versions: from 0.0.0 to 2.4.5.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-84911",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84911",
      "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal AI (Artificial Intelligence) allows Stored XSS",
      "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal AI (Artificial Intelligence) allows Stored XSS. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-84912",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84912",
      "title": "Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versio",
      "summary": "Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-84913",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84913",
      "title": "Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.",
      "summary": "Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-84914",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84914",
      "title": "Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0",
      "summary": "Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-84915",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84915",
      "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Component blocks allows Stored XSS. This issue",
      "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks versions: from 0.0.0 to 1.2.7.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-84916",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84916",
      "title": "Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0.",
      "summary": "Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-84917",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84917",
      "title": "Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 t",
      "summary": "Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 to 2.0.2.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-84918",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84918",
      "title": "Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank payment A",
      "summary": "Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank payment API versions: from 0.0.0 to 1.0.3.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-84919",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84919",
      "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image",
      "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Stored XSS. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 5.0.9.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "JavaScript",
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-84920",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84920",
      "title": "Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affects Unpublished Node Permissions vers",
      "summary": "Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affects Unpublished Node Permissions versions: from 0.0.0 to 1.8.0.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-84921",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84921",
      "title": "Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects Webform Submissions Delete versions:",
      "summary": "Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects Webform Submissions Delete versions: from 0.0.0 to 1.2.0.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-84923",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84923",
      "title": "Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Authentica",
      "summary": "Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Authentication Bypass. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-84924",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84924",
      "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Email Verification / SMS Verification / OTP Ve",
      "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Reflected XSS. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-87936",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87936",
      "title": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injec",
      "summary": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affects amazee.ai Private AI Provider versions: from 0.0.0 to 1.3.7, from 1.4.0 to 1.4.3.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-87937",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87937",
      "title": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This",
      "summary": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Authentication System (CAS) Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-87938",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87938",
      "title": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection. This issue affec",
      "summary": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: from 0.0.0 to 1.0.2.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-87939",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87939",
      "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Feed Block allows Stored XSS. This issue affec",
      "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Feed Block allows Stored XSS. This issue affects Feed Block versions: from 0.0.0 to 2.0.2, from 3.0.0 to 3.0.2.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-87940",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87940",
      "title": "Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly Configured Access Control Security",
      "summary": "Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Key auth versions: from 0.0.0 to 2.2.4.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-87941",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87941",
      "title": "Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x.",
      "summary": "Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-87942",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87942",
      "title": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal SafeDelete allows Stored XSS. This issue affec",
      "summary": "Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal SafeDelete allows Stored XSS. This issue affects SafeDelete versions: from 0.0.0 to 1.0.88.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-87943",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87943",
      "title": "Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing. This issue affects SAML SSO - Service Provider versions",
      "summary": "Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-87944",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87944",
      "title": "Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle (AiTM). This issue affects SAML SSO - Se",
      "summary": "Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle (AiTM). This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-87945",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87945",
      "title": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the Source of Data. This issue affects",
      "summary": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the Source of Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    },
    {
      "id": "CVE-2026-87946",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87946",
      "title": "Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force. This issue affects SAML SSO - Service Provider versio",
      "summary": "Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.",
      "date_published": "2026-10-22T00:00:00+09:00",
      "tags": [
        "Drupal"
      ]
    }
  ]
}