{ "locale": "zh", "language": { "code": "zh", "native": "中文（简体）", "html": "zh-Hans", "dir": "ltr", "en": "Chinese (Simplified)", "ja": "中国語（簡体）" }, "language_native": "简体中文", "snapshot": "2026-10-28-1318", "source_hash": "fa58c1c899e89886889716538f41845e2b0e9d28aefa088c3cc8d04d9072ad34", "register_hash": "20c7ca66864a7f095fadee221ff46e38cb9d0f9991d100627c4f584912b71d90", "string_hashes": { "records.gmo-domain-stop.title": "c402c77ad9e487eade6f6bd2dcbc6e01cdd96ce01b0d2194cdd6a8c69e985834", "records.gmo-domain-stop.body": "71c415860e588270d7af313a493a3bf56552e9b0a7565ba71312a60a98844117", "records.gmo-domain-stop.action": "56403b4f3ca64a923777a0d83b9f20402b80a6d070a902f18dece0c59e1fefb4", "records.gmo-domain-stop.time": "5cb7edee184f12661e52bbbb8caf0d36338c2008db4e9d2d30885506da6b00f5", "records.atlink-beta.title": "13f0da1c530d2e2900a17b008c0da422b880feb1d7bcd2cef37f7902167bda6b", "records.atlink-beta.body": "cbb52f49f74284691e9d9b683c1708f80a2dbba8935347bb65dedea2ffab4f7a", "records.atlink-beta.action": "223346e4ecbdb8c1296e6930af66cf89cf354afda81c2b7525921c9ca80618f2", "records.atlink-beta.time": "93cde7544dcea8f539b31733fcbcb9c572088b168e8bc587b9111bdf8716deb4", "records.railway-signups.title": "6a56ede537a1268cbe9d067c495167c7c0006c6f59deb8752fffc2193a1c0ff8", "records.railway-signups.body": "3d19f08fd120f5092c67b42684bcf63ec0020b3a0ea0ed601a443d4284a29b0e", "records.railway-signups.action": "464252a1c79129f5a5c837366bc4955d2a428b884832fcae63bed5c6958094e3", "records.railway-signups.time": "555c5a803e4d7bf2d9cb6d372df4acdfc2f24f1b97770225998757592a68d114", "records.studio-reporting.title": "4617c30d19e50df9d4ff4171aa454758dc0eed7bc3c536d0c8a73b8337af2215", "records.studio-reporting.body": "d809e3eaabc4ae33782b945b4416e6849b8351aeeedff77bc0a14856fc794df5", "records.studio-reporting.action": "e379ce22885a43b2cbc78daccd3c4a8f707f203a4db4c2758fe7653a7d2db3cc", "records.studio-reporting.time": "c1a29a818b233e68679bdad0db002cc553bc8231758110ebccf241315954d951", "records.kev-brotli-commerce.title": "59081bc5bfc5f0a50d6ce2793d192d76c8ecbc6edc2dc5247cc1d1c62e87eb7c", "records.kev-brotli-commerce.body": "3e344f4ec08cff88012f7bf3f860252c89095aea965688482905d92de7771e90", "records.kev-brotli-commerce.action": "0868c7d84029a79ac01e37c01cbd8739e871c95ca0f665433899a36ba8146eaf", "records.kev-brotli-commerce.time": "799fa715e45ca373293fb83306a7d1883b615cc2d91351d9201f98902c56a0d6", "records.dotnet-deploy.title": "5dec31ab37a23d4654a559c15353e4a6cef84bd6b90b5ccbb1f8260577f58162", "records.dotnet-deploy.body": "a2335abdbcfa9c933e93c41ff754f176933e4d19d989ebd1f6774665696208aa", "records.dotnet-deploy.action": "a2f752571c8887bfc1567408b3154a1e169ee2148999d9de9227f51da707df09", "records.dotnet-deploy.time": "fd30d19e7f9cc60cc88d80141f3948d9f65b62ba9394c8cd49bb3c3df981d631", "records.netscaler-php.title": "ce4fd6e133536fbbf26654d5a56896c30d3c0ebd534b3644e1ee4915291e7fe2", "records.netscaler-php.body": "cbf61f9da5d69c03a7565cc6c0c36bd83501dfbc3639ea1953fc17d3908f849f", "records.netscaler-php.action": "27983597785033bde54dc49af09aa8e9f0ad0a659707c7d2b1326d15fab988ee", "records.netscaler-php.time": "8053e36a85c41935fca5fd0ecc2aaf43f3d30bf38066723cffa67346075e3d4b", "records.pan-branch-status.title": "a455470d12b28213abe6601b9b25987af70296c53df452297794db44d6e08619", "records.pan-branch-status.body": "20e8869cb1350dc426ed9e3265ba9a22f09fe6ce792c279d1989ffbdd00d6918", "records.pan-branch-status.action": "4e4ebfd92394542e35fa48084ebd90372234b2f4b994143809746152e52c38c9", "records.pan-branch-status.time": "1c6530f5b9a99329ff2e7e19b45172145f646db7a2506dcabd30e99e1d5580fd", "records.watchguard-fireware.title": "bbeede50834e9ef97658c84e82951c6c29f2e55a3422511e28ccfc80cd03db15", "records.watchguard-fireware.body": "6dbe2ba2e97e24100f9752267635fb19afdd8ff15aab2aca38ae5d0f85ce527f", "records.watchguard-fireware.action": "cae1d9dbda7594752d0b7b09c301e63824a279938a89a1011385c7328e747528", "records.watchguard-fireware.time": "150882237789e8ac91598d194360de0880282babf9c14c74dc4597b4a23466cd", "records.browser-mail.title": "b5120246dcf379bb9fd510b48a6501d5ec85ac355c71d2c6f9297f6407bbfa91", "records.browser-mail.body": "d7f007ff5a87afdae8cb6c3db06014093fec23213a576d9bf8ffaffc8de11d8a", "records.browser-mail.action": "45e94de01566ad7d73b130857e90143b6a482536283d65d505b011d86fcf456c", "records.browser-mail.time": "5760b50c6c4efa605ca61ef076fcce69f03e69f237865c62dd878dcbf88e0614", "records.creative-cloud.title": "713143c4b6c1c495ad133b3738922ec45fcbecd81ad8d2017b107cd8c3df4fc2", "records.creative-cloud.body": "e408eefcb8755d6c9b1a09cb40ab215950c3f10f0a8ff0c28305c0246a6b25c7", "records.creative-cloud.action": "8724acbb5a1e4f031dd25116806a3afe3da686a7b1e38e1bbe28f6beec92a122", "records.creative-cloud.time": "5c8057994b0804c9e8ff3dede98ea4e1de2305e235214cf03ff670d4ab83e70c", "records.oss-mlflow-mlflow.title": "5ec54f0aa62ba2c4b139c818d948c1e1dd8a2639e584186a88c0c0856b8ed058", "records.oss-mlflow-mlflow.body": "f71eb0aae3a6d3df7834886dfc37775439a1b5ca1fc1445efea6d2bc3990aba6", "records.oss-mlflow-mlflow.action": "44d52351c00ccfa09769caed493fc184793ff86b47441dc07a13d4a794fee11c", "records.oss-mlflow-mlflow.time": "95a204cc84f5a648228b8dd3d15aa23f28f556de5615763e3a5ad344fa523bc1", "records.oss-datadog-dd-trace-js.title": "b8b0d541765c6196a2cda8114076081b68219c208b572990b5087f61945df2cb", "records.oss-datadog-dd-trace-js.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-datadog-dd-trace-js.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-datadog-dd-trace-js.time": "25d382583483471bfee1307f6e21e9548cbb28fb04aa035d94055fed6ba9f83d", "records.oss-tinymce-tinymce.title": "483819225246dd63a489a4b6b48ba7cb5c0c04ea1a230bae3148bc716ef3c1dd", "records.oss-tinymce-tinymce.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-tinymce-tinymce.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-tinymce-tinymce.time": "d3d7f3433eb18ed9b24b474d0c3cfbb6d22ef0aa9626ba900cd6b3de43b24f16", "records.oss-modelcontextprotocol-python-sdk.title": "dffdf6453cd30ba954eb766950f31a27fb0ed3f2dd3612e4a4191b39a2d183ab", "records.oss-modelcontextprotocol-python-sdk.body": "d6448f402587aa4235d90073e376e26ac2028069e1040af586a31f51a490a404", "records.oss-modelcontextprotocol-python-sdk.action": "da33fe608dd770801ae6545f7fe614c6c41eae5bc8d6d8a07e2aa96dfa6b3159", "records.oss-modelcontextprotocol-python-sdk.time": "8e004881f81955a4a6a3b45898d0936d0c717b43b2a98ad348f196fa1a766c5a", "records.oss-open-telemetry-opentelemetry-python.title": "15fa2e0a7ef72ccbcfc960ac69c0a66726596241ee0672a829022cb8065abd32", "records.oss-open-telemetry-opentelemetry-python.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-open-telemetry-opentelemetry-python.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-open-telemetry-opentelemetry-python.time": "697d962918fba6e3e55c2698e0e7e68492343af7065acd6064302cf913fca8a2", "records.oss-ckeditor-ckeditor5.title": "efd846df9835e0a4c60d409ac8b0caf8cbad65347b265e963386d97c6cdf58cc", "records.oss-ckeditor-ckeditor5.body": "f8cb70d41f1d1e03ae3d8f89006971b3200f9dcbab29e35f835430282ff8b350", "records.oss-ckeditor-ckeditor5.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-ckeditor-ckeditor5.time": "32f2f1a3d46f661080e186451fdd44223a020c81fd53b54e1430ba974a663f2a", "records.oss-m1k1o-neko.title": "b4c30425d0f4c663a10708e9d9ed4f0a5fbe809634d457a616303e7dad611c1a", "records.oss-m1k1o-neko.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-m1k1o-neko.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-m1k1o-neko.time": "ccef60df1281b41523dba2d0c6f9b6a8c20eb0c471c9192d6bc511ee290eac39", "records.oss-runatlantis-atlantis.title": "d8dd3f71d861318c42dd213353976cb22b060a349488299ce32c64e472c8c4db", "records.oss-runatlantis-atlantis.body": "e6c9b9726114621d510bd61e30a0f232f3eedfd278a6a2921239553002bb4dcf", "records.oss-runatlantis-atlantis.action": "dc628a4a2dedcea1c5c4f0f87dbda33c16291857c483976acdba302850a51125", "records.oss-runatlantis-atlantis.time": "ef222a1e3b18d015ff1d9d6e99a0c0327f3b5f57061f8cdbd640313f77487138", "records.oss-gtsteffaniak-filebrowser.title": "1702668e2f8395c901ca0891070300df6328da6ac68f11f1bf78c616cd32575a", "records.oss-gtsteffaniak-filebrowser.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-gtsteffaniak-filebrowser.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-gtsteffaniak-filebrowser.time": "2888825a8a1a121a5f09bfdb41335ecceda41285ffab89b6cf9f1c773c9ef545", "records.oss-nodejs-undici.title": "93a89e03f06a88242919a90bdba7b9dd28591f4ca1148f5e8eb930aff4a7d513", "records.oss-nodejs-undici.body": "c121436db0a18ed7a707222380f092aa43f2945d7d1984acf0c4dfd94cb2c9ff", "records.oss-nodejs-undici.action": "ff3a6b4fa0be940c487b621ca3fe1ba5200673718ddd47ae2c411ab047c085e6", "records.oss-nodejs-undici.time": "846e80a053991dc7be7c713e3cd5e5abcb6e9c2d1d7207f9412db2af04a8157d", "records.oss-modelcontextprotocol-typescript-sdk.title": "1776a4146bce209b9f62a50b78ab005892707d476187a76675b73bcbb8737835", "records.oss-modelcontextprotocol-typescript-sdk.body": "6ba017c73e3c2a8c105a6f0f970a37b94f01d2a06f2ab6b39097562cadca1199", "records.oss-modelcontextprotocol-typescript-sdk.action": "0278790776d9d66cf350a4168a49a9a1304516f2a795441bcfec9490d708e448", "records.oss-modelcontextprotocol-typescript-sdk.time": "0dc071eb5b7afb0783811393f34326409a0ddaa3d29e38141aa4c4e8d70d89c5", "records.oss-symfony-symfony.title": "8a780a0561651f4f4cfb601a24585be057e0f614bde65ad0aa0e9e1c2e15aff2", "records.oss-symfony-symfony.body": "f8cb70d41f1d1e03ae3d8f89006971b3200f9dcbab29e35f835430282ff8b350", "records.oss-symfony-symfony.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-symfony-symfony.time": "b143baec0b0006cf83e3ef6dc05577b40e352a8e72ae8904705ef401c8c68561", "records.oss-go-jose-go-jose.title": "84ecd5c2039ad381e679f5ff43f65eb0be1951a929a9193fd258c1a63b3d7add", "records.oss-go-jose-go-jose.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-go-jose-go-jose.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-go-jose-go-jose.time": "0ff08205cc541f9357ebd0a874959a2880bcad6588fa4b3154fd95d091a628d5", "records.oss-ctfer-io-terraform-provider-ctfd.title": "5529610c4f777dd3eddfc76b452a663de1710ebef7a0011bd3b97c1eb652336b", "records.oss-ctfer-io-terraform-provider-ctfd.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-ctfer-io-terraform-provider-ctfd.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-ctfer-io-terraform-provider-ctfd.time": "1e422c9c2338d8f7d5965d3d78892013e0bfc120d3999b50b9b1a404a3f144e3", "records.oss-hydra-ecosystem-hydra.title": "434fbdeaa861590f0582164304bcd62b4a3143e702c7ca99f167ebd2b5145ad8", "records.oss-hydra-ecosystem-hydra.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-hydra-ecosystem-hydra.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-hydra-ecosystem-hydra.time": "5ac0f198296ea17c1f1ed787cfb030ce4c116a848600c0617997012d7148b77c", "records.oss-ljharb-qs.title": "6920306227d689bbe4a46c4227b7f979c8fe8f7a606c8ba49a2457441d1321bd", "records.oss-ljharb-qs.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-ljharb-qs.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-ljharb-qs.time": "915e9f04c2b3552c570f74d36667678c20dc1604928554ebc241d650e6d996ca", "records.oss-authlib-authlib.title": "1e76baf2dcfb37c4d44e09397640b87a6f7da7681e625ecb1c221f9d5d50441d", "records.oss-authlib-authlib.body": "09ec93dc49854b38e8ce2736ed87870e08c426354812fbb2a6a3fb29052d6727", "records.oss-authlib-authlib.action": "c9ea2d5fa6946cdd97f07e73a7e0c88086a469312b6f817caec1ac5024dec80f", "records.oss-authlib-authlib.time": "a6ff3611ecfc2c6bfdc21698ae5f00ba43f910b69ac2b488ef76ccdcc8a6c2f4", "records.oss-rustls-rustls.title": "5a08849436941de887f7b7d6e2beaac19834c2411ce5ba023c03551461be3432", "records.oss-rustls-rustls.body": "ed6c0feaaee3bcc475ae024a98b70c76a900cb0e6432b268b09f314c8ace8af1", "records.oss-rustls-rustls.action": "6d3532ca53d232ba99a30ca66ab76c6e1832e5e899b3977d2928ec35bf96b6f4", "records.oss-rustls-rustls.time": "b73b7d57316683716dbeab12201d619844a5f16baaaf49e8f14b55839f69bc91", "records.oss-phpoffice-phpspreadsheet.title": "ccbff6e3df093c42b68d27dde5431b4891e3e79d3212a925538376087cbf7256", "records.oss-phpoffice-phpspreadsheet.body": "8377433724ae7d69e41854310b8c3493ead59aaa525411770b8eab34c41611b3", "records.oss-phpoffice-phpspreadsheet.action": "f2613ab3d2e61d12fb8e660404504f71cff906515e091ecd9866268f468a401d", "records.oss-phpoffice-phpspreadsheet.time": "f5b33b21b67308a90709f54185c4aafbb95d9b24942e39deac9f8559d2af14ff", "records.oss-klauspost-compress.title": "a4ec594746710565d7b15af479ba074a4409b2d8e14320c31b71eb86d521304d", "records.oss-klauspost-compress.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-klauspost-compress.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-klauspost-compress.time": "24e4bf907ca693c6f8c686fb19654e8103c4cbb9d7a8398564a746ecca45de5c", "records.oss-rthalley-dnspython.title": "e383d9b0c6fa5b130b3be0dc39ba6d548585575f229e39647ac5ece7eecbdad6", "records.oss-rthalley-dnspython.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-rthalley-dnspython.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-rthalley-dnspython.time": "6ac4a8be83831d6a9d489e1f05bce6c2db8e6e07d0a6de9a63d59cdefbe90f08", "records.oss-datadog-dd-trace-py.title": "59b1ca85cfd8f64d5273a1a0f272b9151127ddb5371d632f43adc803320a38ec", "records.oss-datadog-dd-trace-py.body": "f8cb70d41f1d1e03ae3d8f89006971b3200f9dcbab29e35f835430282ff8b350", "records.oss-datadog-dd-trace-py.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-datadog-dd-trace-py.time": "a83653cb7313c78ff3c37186c9b233bd4666c0b9a5564c8808bcb622bd0dca85", "records.oss-mongodb-mongo-python-driver.title": "3aeeaf585016b0514b22d5608a3266f03921dc0e1a75956c6bf1a18d29cd6049", "records.oss-mongodb-mongo-python-driver.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-mongodb-mongo-python-driver.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-mongodb-mongo-python-driver.time": "87fe60aedc1e11072195812222c9880e0eef6d682b238295268ae2c725f8a463", "records.oss-vllm-project-vllm.title": "0d65d171d65eafc3b38cafaf0902b60df5b6125739a70d793418e369551344c3", "records.oss-vllm-project-vllm.body": "a93d0155da87b81cf5d3a2606c1e188fbcade47f66c35a81de9746c37b291c17", "records.oss-vllm-project-vllm.action": "d9397d0e3bd753c331616c1cba1727b04686cc4c75b1b62a99b03a76007cedd9", "records.oss-vllm-project-vllm.time": "5a16cbea99087c7b027b5ce03104a39d7509dd155bf5c77be1e89edd27f605bb", "records.oss-strands-agents-harness-sdk.title": "bd87c596eceef467ae6b70bd7b1461f53f93304211112db7cacea50ba8d818f2", "records.oss-strands-agents-harness-sdk.body": "f8cb70d41f1d1e03ae3d8f89006971b3200f9dcbab29e35f835430282ff8b350", "records.oss-strands-agents-harness-sdk.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-strands-agents-harness-sdk.time": "ba0ce681b5db2792a9b77510f1f615ca22a39307b22063186c10cc1ff0461471", "records.oss-xerial-snappy-java.title": "d464280d4eda11d2a1ab4e65be1006616736dadbff2c1ebfa54172396aa7dae9", "records.oss-xerial-snappy-java.body": "84d18f368e8cd1484e0a43d430865734e1646f9a3f10a1a5c7d0fc71826d0752", "records.oss-xerial-snappy-java.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-xerial-snappy-java.time": "fd2f5577917459fb44decff3bd526040db527ee322109a348ad101501f99b481", "records.oss-stevereiner-flexible-graphrag.title": "d1246847158514d3555e5804e3719928b6e81aaf86c9d4c1e8e80ea9e84282a6", "records.oss-stevereiner-flexible-graphrag.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-stevereiner-flexible-graphrag.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-stevereiner-flexible-graphrag.time": "729c2f03fac9877f0bdd8b6e21131124b053702dbba5968b3871508774566230", "records.oss-berriai-litellm.title": "fc5499127b02e572b313516cee6903508cfead7e402a0f5850810a92e379105f", "records.oss-berriai-litellm.body": "f98d407e9d4bce0294bcde2f400b5f7af86167c11893ceae65f54b24a8dd93c6", "records.oss-berriai-litellm.action": "70497cca3b8ce26bd33717da907687fc21223422a2d3f3651de6360e67367cb4", "records.oss-berriai-litellm.time": "c472c3e189449dddaba0d49e77296b65757ac9335889db2e8b8d9255b6c8dcd7", "records.oss-better-auth-better-auth.title": "f952102f9df0f4ab6816d35ef9bb2c91c2730a6d2d4b8280b994f74080efece7", "records.oss-better-auth-better-auth.body": "7c1364caddeb2e24f877234480d86761954ba8fcac074b1a1ec5402637f23854", "records.oss-better-auth-better-auth.action": "3e3ca67970d97ce6845e94ea24662bd19eb87131089a303c2edeeb034aaf5a92", "records.oss-better-auth-better-auth.time": "c8afb1a717767a1e3c92677733c9e67df7f2cb4bdac627cbe11541862e947eeb", "records.oss-gitpython-developers-gitpython.title": "d0d864d96172a14e1807cddd477025711b16671141b8625921bfdc8db8e04951", "records.oss-gitpython-developers-gitpython.body": "f63eed81053897a158856e5a16647d1624af052757cb3cf5471e347cf2991430", "records.oss-gitpython-developers-gitpython.action": "a1492b7ad60d60b4741d19817acd20783f0b7f2e87354f4ac8e9fbd6cc06c2e8", "records.oss-gitpython-developers-gitpython.time": "2ecb50d45803395edca4dd2cd9de170664685856441c81690cc441cc3b92a194", "records.oss-nodemailer-nodemailer.title": "5564e4cfa7a62ead17aabd16914769ba571c1db2ac7d142da03aa2ab9c3bc559", "records.oss-nodemailer-nodemailer.body": "84d18f368e8cd1484e0a43d430865734e1646f9a3f10a1a5c7d0fc71826d0752", "records.oss-nodemailer-nodemailer.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-nodemailer-nodemailer.time": "008f13aee42793d5b91792517647f6642d1e63fe7fab40b2a95db8cd83cd3e6b", "records.oss-msgpack-msgpack-python.title": "894a5f48d288c91153c4fa45030cdf671a66958e5f7ac7cd04f0b347fa888e1e", "records.oss-msgpack-msgpack-python.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-msgpack-msgpack-python.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-msgpack-msgpack-python.time": "7790b40e3924c4ddd38449bdeb4da789d5b6545d31b85636403f72c4a95fb708", "records.oss-nltk-nltk.title": "37a3fd6691579c86f694dd1c41e66865bae7c4386f23a5764df7140b2b2de104", "records.oss-nltk-nltk.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-nltk-nltk.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-nltk-nltk.time": "3b9262a4321bb4e6333bcf83e2fbd641bae16e08c74b5d002a658aadfaa4888d", "records.oss-pylint-dev-pylint.title": "90caecf7558d222d8b2caa1eef734cb8c1f5e8f07561e66de62ef6fff965984b", "records.oss-pylint-dev-pylint.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-pylint-dev-pylint.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-pylint-dev-pylint.time": "1692c05796414d79ecd6333f14d31bb168b29a41f486f25482c2077f2cd764d2", "records.oss-vercel-next-js.title": "373f954e2f8f2307e70e1588fed94a01efaa32c97b8de12f1f60527fdefb76cb", "records.oss-vercel-next-js.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-vercel-next-js.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-vercel-next-js.time": "cf4bcae67ae97efb3a1d261ce19164c2fa9a19583f5d35ba45aeeb135e541467", "records.oss-danielgatis-rembg.title": "2fe01bb629786abcba84e625b7ad620133729bcec8271b277079f0aeca416b75", "records.oss-danielgatis-rembg.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-danielgatis-rembg.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-danielgatis-rembg.time": "309fbdc3ebf646c50fdae91bec95d5a22d7a3f3d2733d075784cce89191edf74", "records.oss-twisted-twisted.title": "2375097c23a7242cf42e179b60f31aa0e94e1cb01553197f1732dd046cd2c396", "records.oss-twisted-twisted.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-twisted-twisted.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-twisted-twisted.time": "5cae6594f361d1121dd7c925b96547ab5ae14544e6b601ebcb0f7e8906699698", "records.oss-tryghost-ghost.title": "e6e0cffae7a23b577d1b25dee5fc5cbea1376f20a7a12cc2b857c5eeaa5abd26", "records.oss-tryghost-ghost.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-tryghost-ghost.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-tryghost-ghost.time": "e1289aa6e907b1a1eac3682b3b98d00cadeda4992173d0c53b9b5457f30f20b5", "records.oss-siyuan-note-siyuan.title": "b2c6a8ce7d8a29ffc34c865aff86b99cb03c20f420c02dbc5e92cfddb1fe6409", "records.oss-siyuan-note-siyuan.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-siyuan-note-siyuan.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-siyuan-note-siyuan.time": "ae9904d50b65b2ce3b089d7ef062bf6e9842bfae767bbb13797fa12ef1089f6e", "records.oss-py-pdf-fpdf2.title": "e21416bb72ecc5d0fa8ffd4e96001a9eb81d06ef0d84ce399bf4a965776aed0e", "records.oss-py-pdf-fpdf2.body": "f8cb70d41f1d1e03ae3d8f89006971b3200f9dcbab29e35f835430282ff8b350", "records.oss-py-pdf-fpdf2.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-py-pdf-fpdf2.time": "c22b94d57ee5211623dcc751fb3288d3eeed2704d2a2ab851576150ebc1d498f", "records.oss-google-guava.title": "58311c0dc3ae2348e96fa99994ee2e3429d75290f3399267b6e918c7f4edd52d", "records.oss-google-guava.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-google-guava.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-google-guava.time": "be7518e5a701d5616671b17ce428ab8568b89324da3c6f4eb0288bfce03c8a57", "records.oss-agno-agi-agno.title": "b76076d3c7bda7c073b79eda75ac219de7f561fdd54d67ae9e21244305bb0934", "records.oss-agno-agi-agno.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-agno-agi-agno.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-agno-agi-agno.time": "375e018015f13aad8473a061c531d3a9ec58b89efed3bf16af82c8113c25f5bc", "records.oss-oauthlib-oauthlib.title": "b5e9b6d5ec9cc40cbfd94b13f7388cc86bac3ba136ba5f3b5129310c84da7aec", "records.oss-oauthlib-oauthlib.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-oauthlib-oauthlib.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-oauthlib-oauthlib.time": "293c4737cd9d8047b4614d16123db2c79a97f63a00d557ebcd590f465f27edd7", "records.oss-project-monai-monai.title": "c245bfffd9063fdf7a59ecfc153e25273819468b710cf0e117d055be2def2ad7", "records.oss-project-monai-monai.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-project-monai-monai.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-project-monai-monai.time": "c0168f3e956f4390640b012c0a4af4eb51d07ff15eecec53c96d8c2026c4165f", "records.oss-dcmjs-org-dcmjs.title": "62e6182010854e704392332f87122b352b755beaddd8b4f8009fd9e2bf9c305b", "records.oss-dcmjs-org-dcmjs.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-dcmjs-org-dcmjs.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-dcmjs-org-dcmjs.time": "aa8492424025d62cce8fd52a8935baed94d991b416f24f36465e2cca961067b9", "records.oss-wailsapp-wails.title": "8e0f192045a89315dd46fcbed059e6dc682b949050f59585cc26a0ae356dbdb9", "records.oss-wailsapp-wails.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-wailsapp-wails.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-wailsapp-wails.time": "4fca8c074535c335f29e8282bd205e2d7f3775b475382f7b0e2e2a12ecae5ec8", "records.oss-dolibarr-dolibarr.title": "1915b8d12b3ff4ecfc9a793ae074ccab45e1f25ac4af53060aa0d8d6cf6e0898", "records.oss-dolibarr-dolibarr.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-dolibarr-dolibarr.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-dolibarr-dolibarr.time": "919810fcd4fc84effc9b87916f1b1e8526e07e8122f5584ab5c784f06030858f", "records.oss-ajenti-ajenti.title": "e591a447b52d817f3c25571152765914fa66a144b3eb0e693449e4b35df3fcd2", "records.oss-ajenti-ajenti.body": "5129b33b90e56309690c8e0d4554b592d7ac84959e5adf2dc65a269d8e6ce220", "records.oss-ajenti-ajenti.action": "ba6f5fa9fce26a82513a78d4a8e7dad6965838e86f8d715c3c99b5b86b455fa4", "records.oss-ajenti-ajenti.time": "34faef571b9f82e74e41fd9a84b8be8d4fff7bf22f7543e81473105900a47795", "records.connectwise-validation.title": "c6f119835d93026d301e29fec9d05fd677ca0e9d376bcefc09fe6d86a93cfe66", "records.connectwise-validation.body": "8f80dc6f57d6d97c8424b0e0eecf1e4eba3099471e8af42066ca55b8dfb644a0", "records.connectwise-validation.action": "09cc6a0a79288fe1141b5766f6cbfa75f27bafabf8f84477cb34d8804f717000", "records.connectwise-validation.time": "13722fc3b5cc9e685f886e9a596595f801f09a806f446a3c347ac14381ca2d84", "records.tailscale-four-fixes.title": "d98d7336ddba2e2cfab74e5297ddffb173f526550e4608658d1da8b841803a0c", "records.tailscale-four-fixes.body": "e683600dcac284f993e604a441ad4e7461e025d88870ef2d6496157545d560b4", "records.tailscale-four-fixes.action": "954797f20f505c142e505f8113a1b952ce4b37d0b8dbe3e52c72b2ed36f33fcd", "records.tailscale-four-fixes.time": "cf70bc631a6cdfb44421f2bc10155d09126914a67c5909038cd0afcfa49f8a60", "records.fireblocks-no-fix.title": "3598d1f7775deee35793960e01c000690b27c595ba51dfae33600f68466a0d1c", "records.fireblocks-no-fix.body": "a721e914a4a9484a378ee9444f3fbddd77865310e8b4fad0ca539d6d5c0855f4", "records.fireblocks-no-fix.action": "4f008e7c0a8085f8ed590cd7bb6123bea1e1e802916783a75413137dfafca8b7", "records.fireblocks-no-fix.time": "d1301a5cfc5647910156cadf0f90ae0c588019c39f27856de494392e156ea1c6", "records.fortinet-fips.title": "6e0d2af821ece7456110dd60e8535a986672d00c74c0f6b3c3e374644f37e685", "records.fortinet-fips.body": "67798503236dec55d421d2f9885b9cd1fac8a5eb488956367b3b3f0a1a39ddcd", "records.fortinet-fips.action": "6975de23c89cd9b17cba186f4c6cb76a964628f733c74b810315665ff35df894", "records.fortinet-fips.time": "3307167e38d638634d09b78096277ea12771d2f42ae9638f873199f48d484850", "records.litellm-supplychain-response.title": "70b7713b8b4ee24dc6ef02f1f2880d1c546b26ae194ef43c696effb63e66b471", "records.litellm-supplychain-response.body": "17ba8a43507732e3c95e56b46f2e1aacc55586c4e28eac65765c32ad48e01bc0", "records.litellm-supplychain-response.action": "a5dc14470283822a5bdf762bb333f855c061e52d55739aed85f1386fd6aed1ad", "records.litellm-supplychain-response.time": "b2a88e93c481c5b631c72488c44f30a16ee093067a30b6d994ecd7929a794e88", "records.malware-packages.title": "d8c2c1ed8549aaab0e0bda4b76547685a2135b9610295c730ab70762d5c41f7f", "records.malware-packages.body": "d7c11550d3ba547dc1ccd1a9a4391056a8caf913dee846a8248cf973f30a5472", "records.malware-packages.action": "25692f7c18c57d9fd340ec31f0795003b3c9345eeebac6c0bfe7aba2a48b759b", "records.malware-packages.time": "6bdb487ea987a27ea7dbdc9bbe28ecf020debb48b9c4c94d5fc3032b40278346", "caveats.0": "f6dac58016b9fb88ad71887ca928ea5ec7627b185770dee968a1dd227c7e77aa", "caveats.1": "62655e928f6a4b680fb38d14d402dcd088c1b463e45bbe0a6b108f3e284cfa99", "caveats.2": "d0e73e5d4222f5e22bdfd822fa1e590d6cc7e6fe3d4692fa45157fabacf16955", "caveats.3": "2a46fb3dafafa71f99617282ff13517ca217ea1da2b1ad5ec4311600fdbfe367", "caveats.4": "c88ce72670a1df0efd55c15112a35bf3c7956aefbc7a601fc26d1045d3dc85ae", "caveats.5": "8364ce4071c6f69f8b215364cbb95c55323a60c4f5440a5ca46d23d384850750", "caveats.6": "db544aa707145eface401627bffe31223c57dda10260afe32f894b80a8698af5", "caveats.7": "1bac488ca2baecfb32ed90f9e160ff10156d279eb9242940556727f07e9181ba", "report.title": "02be987df8a5c9ee5aaefef64678c458ef81821557ea49c277188075864e57ed", "report.headline": "7e1591695b9492d62a8ca66c2da0839a89f2c96f55cfcc25017b27d5f19ec1f1", "report.intro": "18823b9e4e035711581143740a0cda1eeea61f37d6ac7dc46925d23fb862a7b8", "quick.0.title": "020dde5dfe8bd95e7f1b77ae324b873cbf73895509312343b2d7b5685426c710", "quick.0.text": "693bb5b0028301725e5cc82d8896ed86c2800c737308c49d4c01ddced8b89a6d", "quick.0.label": "fedd666830a221cbd6e467f05e8e7619aab74784600c0c465bbec24bae58feb3", "quick.1.title": "b6e3ab815dd0f543a1eaf41f5570366cbe61896fd3de74b64050fa95b3077c7a", "quick.1.text": "3bfba98af95fa8079d7efc77966eb1bbdeff5c38f0acb99facfa3c3ae135d655", "quick.1.label": "194f0c3a7f0e8d27cb6354a2980ed5c48522c1e75f149b93707126b5a4c3d0c3", "quick.2.title": "1b22bebcf6c067081fa86dd15606a87cd2d53f9f8a68d4eeaf42828348689006", "quick.2.text": "832f20337d86cce850632e1112243b7e67c5d6c2405fb8ba79dc8eb7ff8dc5d9", "quick.2.label": "269ec1e5c02c33befa2c6525768ce446c6e3fcedce5c8f7057bd94e4350578bf", "quick.3.title": "12a22785430d5965ae0eb1f7d2ca80182bfdb9934619efb4ae17553a1fcd586b", "quick.3.text": "59facd5005703921c89d65857494acf4d97199b276468c644ccda65540eb7e71", "quick.3.label": "699e3972e6d4cd6a182a03a32c502209f6d0f58adba5d298dcfc18790906ee66", "ui.title": "c589afd85a653859c675603d873b89a2ec72704a908f9fe532956589276d6ea1", "ui.intro": "8bc1411fd2df3f6f0ad0fdbd6a6d7ed5ba9b0c63f0bd91fbea0f04dd4b859fda", "ui.cutoff": "30bffe1d8c0fefe3ad569045a850f06ea6dd8810b558c34de1f71d4df906a9e6", "ui.actions": "7e155300cecf74323a1e9ffcde23987947c1aa0b2a3e797fd3a50ad82939d62d", "ui.sources": "835c47be68ea833b08692f4fd81b08923cc237d4aa02e12951d1352e9c23bd71", "ui.delta": "9adc14b6e164efe8327f724c20a7ccfb1e6afa553360fe699d5169498751dd53", "ui.scope-complement": "40eb64185c871529b368a52dec2a5da371f082fd0ceede57744418e9e7bded29", "ui.reference-only": "438c048773567ac03e23a2d37bcda0cfd91b904736e75680507be0efb1859685", "ui.notice": "58caa3c4eeff2c6afefb59c8edea1d100788a6947a2c7560e7a91ecbf21e4638", "ui.original": "e8fc20d01f7577c9e02b0eafdd1fb27a5633123f9ac86833b370bc7c8d5fea9f", "ui.data": "2039bbd338a139da69fcdd7b37a2f1dc83dbc2efbf17c2f52fdbb96e895837f3", "ui.home": "f109578971d6a45d0822844efc41ded0cf437c2e1e876ea2519cbbb9dbc12f87", "ui.languages": "2191b209745deedcb25dc4acbbab8273ac7159575dd94c2170b24998e46a2d29", "ui.evidence": "688f77c246c750e5858f1d0b04381beb642d641a043603b7510db8deb1a16da5", "ui.counts": "7d6c2976cecf20cd4587cd6ae65583534f56cbdecabad2b9104cd7a7a8357fe2", "ui.pending": "7673fe83755b580dddf493fe3091b7687e3df01dd8c4268344bf707912eb1790" }, "status": "translated", "strings": { "records.gmo-domain-stop.title": "GMO：犯罪者网站域名停用及补偿说明的后续消息", "records.gmo-domain-stop.body": "第13次通报确认，犯罪者网站的域名于10月28日04:00左右停用。停用并不意味着已收回信息、删除副本或完成服务恢复。第12次通报中最高300万日元的特别慰问金是一项附带条件的制度，并非损失总额或已支付金额。第12次通报的标题19:10与经过栏19:00存在不一致。", "records.gmo-domain-stop.action": "不要访问犯罪者网站或泄露资料，应核实官方的个别通知、替代环境及补偿条件。不要回应借机索取认证信息或手续费的联系。", "records.gmo-domain-stop.time": "10/28 04:00左右确认 / 11:00 JST 第13次通报", "records.atlink-beta.title": "@link：部分医疗机构开展β版测试，并非全面恢复", "records.atlink-beta.body": "10月28日12:30的更新表明，目前处于部分医疗机构开始测试使用云端β版的阶段。患者应用、Web预约、外部系统对接等仍然暂停。医疗机构的预约业务仍受影响，涉及泄露的数量也仍在调查中。", "records.atlink-beta.action": "预约及变更事宜请直接向所使用的医疗机构确认。应区分计划恢复、计划退款与已经实施的事项，并核实恢复时的密码重设说明。", "records.atlink-beta.time": "10/28 12:30 JST 更新", "records.railway-signups.title": "Railway：新用户注册仍暂停，下次报告计划时间在基准时间之后", "records.railway-signups.body": "10月27日15:19 UTC的状态更新中，新用户注册仍暂停，恢复日期未定。应区分现有部署继续运行与构建、仪表板等功能故障。约100,000个工作区、最多1.85%表示环境变量可能受影响的范围，并非已确认的信息泄露人数。", "records.railway-signups.action": "在签发方撤销并重新签发旧密钥，同时开展审计。不要将计划于10月28日16:00 UTC发布的下次报告，视为截至本次基准时间已实现的恢复结果。", "records.railway-signups.time": "10/28 00:19 JST 状态", "records.studio-reporting.title": "Studio：计划于11月上旬开始受理联名报告", "records.studio-reporting.body": "截至28日00:30的更新，尚未开始受理向个人信息保护委员会提交的联名报告。共同报告不包括向本人发出通知。已确认加密密钥被读取，且信息处于外部可获取状态，但实际被获取的信息数量尚未确定。", "records.studio-reporting.action": "调查表单数据的实际使用情况，另行判断是否通知本人。外部API密钥应在签发方撤销。不要认为仅更新密钥就能消除过去信息可能被获取的情况。", "records.studio-reporting.time": "10/28 00:30 JST 更新", "records.kev-brotli-commerce.title": "KEV：新增Brotli和Adobe Commerce，将已确认的利用情况纳入优先级判断", "records.kev-brotli-commerce.body": "CISA 2026.10.27版共收录1,760条。新增CVE-2026-111497和CVE-2026-48356，截止日期为11月10日。这表示已确认漏洞遭到利用，并不意味着所有.NET、Node.js环境或商户均已遭入侵。未提供受害人数或实际损失金额。", "records.kev-brotli-commerce.time": "10/28 04:00:02 JST 目录发布", "records.dotnet-deploy.title": "Brotli：区分.NET修复版本的提供与在使用环境中的部署", "records.dotnet-deploy.body": ".NET 8.0.33 / 9.0.22 / 10.0.14 / 11 RC3为此前已提供的带外修复。.NET Framework不在影响范围内。Azure Functions于10月26日发布的官方说明称正在部署，并未表示已应用到所有运行中的实例。", "records.dotnet-deploy.action": "依赖框架的部署应在更新运行时后重启；自包含部署应重新构建并重新发布；容器应重新构建并重新部署。Functions应核对实际运行的版本。", "records.dotnet-deploy.time": "10/25修复 / 持续核实10/26的Functions说明", "records.netscaler-php.title": "Citrix NetScaler：按版本系列核实PHP修复版本", "records.netscaler-php.body": "CTX697263建议将ADC/Gateway更新至14.1-73.49、13.1-64.32、14.1-73.49 FIPS、13.1-FIPS/NDcPP 13.1.37.286或更高版本。厂商表示，由其管理的云服务已完成处理，客户无需操作。", "records.netscaler-php.action": "按版本系列核对自行运维的设备版本。不要仅凭PHP上游版本标识判断是否回移植了修复，应限制管理界面的访问并开展入侵调查。", "records.netscaler-php.time": "上次基准时间之后的官方后续消息", "records.pan-branch-status.title": "PAN-OS：区分已发布版本与ETA标注", "records.pan-branch-status.body": "官方表中列有12.2.4-h1 / 12.1.7-h11 / 11.2.10-h16等修复版本，但11.2.13-h4、11.2.16-h1等仍保留ETA标注。不要仅因已过计划日期就认定版本已经发布。这是管理面的PHP问题，并非所有数据面通信都具备相同的受影响条件。", "records.pan-branch-status.action": "通过官方AffectedVersions表核实各版本系列实际已发布的版本并更新。将管理接口限制为仅允许可信来源连接，并在更新之外另行检查入侵迹象。", "records.pan-branch-status.time": "10/27官方修订的当前表格", "records.watchguard-fireware.title": "WatchGuard：18项安全公告，核实AD集成条件及Windows客户端", "records.watchguard-fireware.body": "10月27日的官方列表包括Fireware的17项安全公告和Windows Mobile VPN SSL的1项安全公告。AD认证堆溢出问题需要满足AD配置等条件。VPN客户端的本地通信窃听问题也涉及Windows端。厂商在相关公告中表示尚未获悉实际利用情况。", "records.watchguard-fireware.action": "按版本系列更新，如Fireware 2026.4 / 12.12.4，T15/T35则更新至12.5.22等。针对CVE-2026-115495，应将Windows VPN客户端更新至2026.4，不要只更新Firebox设备。Solution栏与产品表的表述差异应对照原文核实。", "records.watchguard-fireware.time": "10/27公布", "records.browser-mail.title": "浏览器与邮件：Firefox / ESR / Thunderbird / Chrome更新", "records.browser-mail.body": "Mozilla于10月27日发布Firefox 159、ESR 153.6 / 115.44、Thunderbird 159 / 153.6。Chrome稳定版正分阶段推送，Windows/Mac版本为156.0.8078.73/.74，Linux/Android版本为156.0.8078.73。安全公告数量并非受害事件数量。", "records.browser-mail.action": "执行更新并重启。核实适合操作系统及企业管理政策的受支持版本系列，不要为Chrome尚未公开的细节添加虚构的CVE或零日漏洞认定。", "records.browser-mail.time": "10/27发布", "records.creative-cloud.title": "Creative Cloud Windows：修复本地权限提升问题", "records.creative-cloud.body": "APSB26-135针对Windows版6.10及更早版本的搜索路径问题，在6.11中进行了修复。厂商表示没有已知的实际利用情况。这并非确认用户已遭入侵的公告。", "records.creative-cloud.action": "将Creative Cloud Desktop更新至6.11或更高版本。核实已部署终端的实际版本。", "records.creative-cloud.time": "10/27安全公告", "records.oss-mlflow-mlflow.title": "MLflow：文件读取、scorer执行及在trace中记录密钥", "records.oss-mlflow-mlflow.body": "影响范围不仅包括未启用认证的服务器，部分问题也涉及使用basic-auth的低权限用户。其中包括CrewAI autolog将API密钥记录到trace中的问题。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-mlflow-mlflow.action": "更新至3.17.0。限制公开访问，检查trace和OTLP输出目的地，并撤销已暴露的提供商密钥。", "records.oss-mlflow-mlflow.time": "GHSA公开时间：2026-10-27T21:26:32Z 至 2026-10-27T21:26:56Z", "records.oss-datadog-dd-trace-js.title": "dd-trace-js：核实已公开的安全公告及修复范围", "records.oss-datadog-dd-trace-js.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-datadog-dd-trace-js.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-datadog-dd-trace-js.time": "GHSA公开时间：2026-10-27T21:07:25Z 至 2026-10-27T21:07:25Z", "records.oss-tinymce-tinymce.title": "tinymce：核实已公开的安全公告及修复范围", "records.oss-tinymce-tinymce.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-tinymce-tinymce.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-tinymce-tinymce.time": "GHSA公开时间：2026-10-27T21:07:12Z 至 2026-10-27T21:07:12Z", "records.oss-modelcontextprotocol-python-sdk.title": "MCP Python SDK：audience验证及重定向、schema引用", "records.oss-modelcontextprotocol-python-sdk.body": "应区分bearer token的目标resource验证、跨源重定向时转发自定义header/body，以及outputSchema外部引用导致的SSRF或服务停止。不要将其认定为单独的Authorization header泄露。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-modelcontextprotocol-python-sdk.action": "更新至1.30.0 / 2.2.0或更高版本。audience防护还需要validate_token_resource=True、resource_server_url及返回AccessToken.resource。仅更新版本不会启用验证。", "records.oss-modelcontextprotocol-python-sdk.time": "GHSA公开时间：2026-10-27T21:05:29Z 至 2026-10-27T21:06:59Z", "records.oss-open-telemetry-opentelemetry-python.title": "opentelemetry-python：核实已公开的安全公告及修复范围", "records.oss-open-telemetry-opentelemetry-python.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-open-telemetry-opentelemetry-python.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-open-telemetry-opentelemetry-python.time": "GHSA公开时间：2026-10-27T21:06:54Z 至 2026-10-27T21:06:54Z", "records.oss-ckeditor-ckeditor5.title": "ckeditor5：核实已公开的安全公告及修复范围", "records.oss-ckeditor-ckeditor5.body": "在本次GHSA公开时间窗口内确认了2项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-ckeditor-ckeditor5.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-ckeditor-ckeditor5.time": "GHSA公开时间：2026-10-27T21:05:06Z 至 2026-10-27T21:05:13Z", "records.oss-m1k1o-neko.title": "neko：核实已公开的安全公告及修复范围", "records.oss-m1k1o-neko.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-m1k1o-neko.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-m1k1o-neko.time": "GHSA公开时间：2026-10-27T21:04:57Z 至 2026-10-27T21:04:57Z", "records.oss-runatlantis-atlantis.title": "Atlantis：plan阶段的workspace命令注入", "records.oss-runatlantis-atlantis.body": "执行plan的PR中，atlantis.yaml的workspace是攻击入口。即使没有自定义工作流或apply权限，也可能满足利用条件。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-runatlantis-atlantis.action": "更新至0.47.1。限制对不可信PR执行plan，并检查runner的云服务及VCS权限。", "records.oss-runatlantis-atlantis.time": "GHSA公开时间：2026-10-27T21:04:50Z 至 2026-10-27T21:04:50Z", "records.oss-gtsteffaniak-filebrowser.title": "filebrowser：核实已公开的安全公告及修复范围", "records.oss-gtsteffaniak-filebrowser.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-gtsteffaniak-filebrowser.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-gtsteffaniak-filebrowser.time": "GHSA公开时间：2026-10-27T21:04:40Z 至 2026-10-27T21:04:40Z", "records.oss-nodejs-undici.title": "undici：TLS验证、缓存边界及DoS", "records.oss-nodejs-undici.body": "涉及TLS选项传递、跨源重定向与共享缓存、WebSocket缓冲等不同条件下的问题。不要将Node.js内置fetch与单独的npm依赖视为同一个已部署版本。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-nodejs-undici.action": "核对相关版本系列6.29.1 / 7.30.1 / 8.12.2。分别更新npm依赖与内置运行时，并检查缓存共享、重定向和TLS配置。", "records.oss-nodejs-undici.time": "GHSA公开时间：2026-10-27T16:09:45Z 至 2026-10-27T19:02:31Z", "records.oss-modelcontextprotocol-typescript-sdk.title": "MCP TypeScript SDK：HTTP正文与批处理长度上限", "records.oss-modelcontextprotocol-typescript-sdk.body": "HTTP传输层或处理程序中，过大的正文及JSON-RPC批处理会导致资源消耗问题。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-modelcontextprotocol-typescript-sdk.action": "核对实际使用的包，如sdk 1.30.1、server/node 2.1.0、hono 2.0.1等，并在反向代理上设置上限。", "records.oss-modelcontextprotocol-typescript-sdk.time": "GHSA公开时间：2026-10-27T19:02:00Z 至 2026-10-27T19:02:00Z", "records.oss-symfony-symfony.title": "symfony：核实已公开的安全公告及修复范围", "records.oss-symfony-symfony.body": "在本次GHSA公开时间窗口内确认了2项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-symfony-symfony.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-symfony-symfony.time": "GHSA公开时间：2026-10-27T19:01:39Z 至 2026-10-27T19:01:50Z", "records.oss-go-jose-go-jose.title": "go-jose：核实已公开的安全公告及修复范围", "records.oss-go-jose-go-jose.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-go-jose-go-jose.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-go-jose-go-jose.time": "GHSA公开时间：2026-10-27T19:01:30Z 至 2026-10-27T19:01:30Z", "records.oss-ctfer-io-terraform-provider-ctfd.title": "terraform-provider-ctfd：核实已公开的安全公告及修复范围", "records.oss-ctfer-io-terraform-provider-ctfd.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-ctfer-io-terraform-provider-ctfd.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-ctfer-io-terraform-provider-ctfd.time": "GHSA公开时间：2026-10-27T19:00:50Z 至 2026-10-27T19:00:50Z", "records.oss-hydra-ecosystem-hydra.title": "hydra：核实已公开的安全公告及修复范围", "records.oss-hydra-ecosystem-hydra.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-hydra-ecosystem-hydra.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-hydra-ecosystem-hydra.time": "GHSA公开时间：2026-10-27T17:08:41Z 至 2026-10-27T17:08:41Z", "records.oss-ljharb-qs.title": "qs：核实已公开的安全公告及修复范围", "records.oss-ljharb-qs.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-ljharb-qs.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-ljharb-qs.time": "GHSA公开时间：2026-10-27T16:10:55Z 至 2026-10-27T16:10:55Z", "records.oss-authlib-authlib.title": "Authlib：签名、nonce、audience等验证边界", "records.oss-authlib-authlib.body": "包括空签名、空HMAC密钥、算法混淆、request_uri SSRF等问题。仅使用1.9.0不足以修复空HMAC密钥问题。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-authlib-authlib.action": "核实是否为1.9.1或更高版本。核对issuer、audience、nonce、允许的算法及密钥配置，并限制request_uri的获取目的地。", "records.oss-authlib-authlib.time": "GHSA公开时间：2026-10-27T14:50:18Z 至 2026-10-27T16:09:22Z", "records.oss-rustls-rustls.title": "rustls：TLS机密信息、ECH及压缩处理", "records.oss-rustls-rustls.body": "应区分Debug输出中的机密信息、ECH被拒绝时的缓冲区、密钥交换状态及Brotli证书解压缩的分配量。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-rustls-rustls.action": "更新至稳定系列0.23.46，并检查含有机密信息的Debug日志。0.24开发系列对应dev.2。", "records.oss-rustls-rustls.time": "GHSA公开时间：2026-10-27T16:08:36Z 至 2026-10-27T16:08:59Z", "records.oss-phpoffice-phpspreadsheet.title": "PhpSpreadsheet：XXE、外部图片SSRF及资源消耗", "records.oss-phpoffice-phpspreadsheet.body": "包括绕过XML扫描器、ODS重复行、通过图片重定向绕过允许目的地限制等问题。影响范围随使用的读取器及版本系列而异。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-phpoffice-phpspreadsheet.action": "核对各项安全公告对应的修复版本，如5.10.0 / 3.10.8 / 2.4.8 / 2.1.19 / 1.30.7等。隔离不可信文档，并限制出站通信。", "records.oss-phpoffice-phpspreadsheet.time": "GHSA公开时间：2026-10-27T15:38:22Z 至 2026-10-27T15:38:39Z", "records.oss-klauspost-compress.title": "compress：核实已公开的安全公告及修复范围", "records.oss-klauspost-compress.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-klauspost-compress.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-klauspost-compress.time": "GHSA公开时间：2026-10-27T15:38:14Z 至 2026-10-27T15:38:14Z", "records.oss-rthalley-dnspython.title": "dnspython：核实已公开的安全公告及修复范围", "records.oss-rthalley-dnspython.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-rthalley-dnspython.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-rthalley-dnspython.time": "GHSA公开时间：2026-10-27T15:37:37Z 至 2026-10-27T15:37:37Z", "records.oss-datadog-dd-trace-py.title": "dd-trace-py：核实已公开的安全公告及修复范围", "records.oss-datadog-dd-trace-py.body": "在本次GHSA公开时间窗口内确认了2项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-datadog-dd-trace-py.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-datadog-dd-trace-py.time": "GHSA公开时间：2026-10-27T15:37:24Z 至 2026-10-27T15:37:31Z", "records.oss-mongodb-mongo-python-driver.title": "mongo-python-driver：核实已公开的安全公告及修复范围", "records.oss-mongodb-mongo-python-driver.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-mongodb-mongo-python-driver.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-mongodb-mongo-python-driver.time": "GHSA公开时间：2026-10-27T15:36:35Z 至 2026-10-27T15:36:35Z", "records.oss-vllm-project-vllm.title": "vLLM：模型revision指定及P2P卸载", "records.oss-vllm-project-vllm.body": "应区分通过请求中的mm_processor_kwargs.code_revision触发的执行问题，与特定P2P次级存储层的socket耗尽问题。并非所有配置都具备相同条件。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-vllm-project-vllm.action": "核实各项安全公告的功能条件。执行问题在0.31.0中修复，P2P问题在0.32.0中修复。限制模型获取及API访问。", "records.oss-vllm-project-vllm.time": "GHSA公开时间：2026-10-27T14:45:53Z 至 2026-10-27T15:36:17Z", "records.oss-strands-agents-harness-sdk.title": "harness-sdk：核实已公开的安全公告及修复范围", "records.oss-strands-agents-harness-sdk.body": "在本次GHSA公开时间窗口内确认了2项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-strands-agents-harness-sdk.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-strands-agents-harness-sdk.time": "GHSA公开时间：2026-10-27T15:34:28Z 至 2026-10-27T15:34:33Z", "records.oss-xerial-snappy-java.title": "snappy-java：核实已公开的安全公告及修复范围", "records.oss-xerial-snappy-java.body": "在本次GHSA公开时间窗口内确认了3项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-xerial-snappy-java.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-xerial-snappy-java.time": "GHSA公开时间：2026-10-27T15:33:22Z 至 2026-10-27T15:33:42Z", "records.oss-stevereiner-flexible-graphrag.title": "flexible-graphrag：核实已公开的安全公告及修复范围", "records.oss-stevereiner-flexible-graphrag.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-stevereiner-flexible-graphrag.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-stevereiner-flexible-graphrag.time": "GHSA公开时间：2026-10-27T15:32:45Z 至 2026-10-27T15:32:45Z", "records.oss-berriai-litellm.title": "LiteLLM：权限提升、文件读取及XSS", "records.oss-berriai-litellm.body": "本次3项安全公告公开的是产品漏洞，应与分发渠道遭入侵事件分开处理。从internal_user提升至proxy_admin的问题还取决于旧版本系列的experimental配置。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-berriai-litellm.action": "针对权限提升问题，核实1.100.4 / 1.101.3 / 1.102.2 / 1.103.1 / 1.104.0rc2等对应版本系列。临时措施EXPERIMENTAL_UI_LOGIN=false也会禁用CLI SSO等功能。", "records.oss-berriai-litellm.time": "GHSA公开时间：2026-10-27T15:04:14Z 至 2026-10-27T15:32:36Z", "records.oss-better-auth-better-auth.title": "Better Auth：OAuth state及代理的账户边界", "records.oss-better-auth-better-auth.body": "包括OAuth Proxy、将state用于MagicLink、数据库适配器的速率限制，以及任意设备授权时显示信息不足等问题。设备问题需要满足主动启用相关功能、用户批准等条件。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-better-auth-better-auth.action": "核实better-auth 1.7.7及所使用的适配器。设备授权界面应依据服务器验证后的内容，显示发起请求的客户端及权限。", "records.oss-better-auth-better-auth.time": "GHSA公开时间：2026-10-27T14:49:53Z 至 2026-10-27T15:32:25Z", "records.oss-gitpython-developers-gitpython.title": "GitPython：不可信仓库、refspec及submodule的边界", "records.oss-gitpython-developers-gitpython.body": "共6项安全公告，包括通过分支名读取文件、submodule符号链接、pull的不安全选项及环境变量暴露等问题。利用条件会因常规Git传输限制等因素而异。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-gitpython-developers-gitpython.action": "更新至3.2.0。不要在带有机密信息的CI环境中处理不可信仓库。如确有需要，应进行隔离，并检查已暴露的日志及凭据。", "records.oss-gitpython-developers-gitpython.time": "GHSA公开时间：2026-10-27T15:26:24Z 至 2026-10-27T15:28:03Z", "records.oss-nodemailer-nodemailer.title": "nodemailer：核实已公开的安全公告及修复范围", "records.oss-nodemailer-nodemailer.body": "在本次GHSA公开时间窗口内确认了3项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-nodemailer-nodemailer.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-nodemailer-nodemailer.time": "GHSA公开时间：2026-10-27T15:04:33Z 至 2026-10-27T15:04:39Z", "records.oss-msgpack-msgpack-python.title": "msgpack-python：核实已公开的安全公告及修复范围", "records.oss-msgpack-msgpack-python.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-msgpack-msgpack-python.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-msgpack-msgpack-python.time": "GHSA公开时间：2026-10-27T15:04:07Z 至 2026-10-27T15:04:07Z", "records.oss-nltk-nltk.title": "nltk：核实已公开的安全公告及修复范围", "records.oss-nltk-nltk.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-nltk-nltk.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-nltk-nltk.time": "GHSA公开时间：2026-10-27T14:50:30Z 至 2026-10-27T14:50:30Z", "records.oss-pylint-dev-pylint.title": "pylint：核实已公开的安全公告及修复范围", "records.oss-pylint-dev-pylint.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-pylint-dev-pylint.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-pylint-dev-pylint.time": "GHSA公开时间：2026-10-27T14:46:51Z 至 2026-10-27T14:46:51Z", "records.oss-vercel-next-js.title": "Satori：生成SVG时的转义缺陷", "records.oss-vercel-next-js.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-vercel-next-js.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-vercel-next-js.time": "GHSA公开时间：2026-10-27T14:46:43Z 至 2026-10-27T14:46:43Z", "records.oss-danielgatis-rembg.title": "rembg：核实已公开的安全公告及修复范围", "records.oss-danielgatis-rembg.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-danielgatis-rembg.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-danielgatis-rembg.time": "GHSA公开时间：2026-10-27T14:45:36Z 至 2026-10-27T14:45:36Z", "records.oss-twisted-twisted.title": "twisted：核实已公开的安全公告及修复范围", "records.oss-twisted-twisted.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-twisted-twisted.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-twisted-twisted.time": "GHSA公开时间：2026-10-27T14:45:29Z 至 2026-10-27T14:45:29Z", "records.oss-tryghost-ghost.title": "Ghost：核实已公开的安全公告及修复范围", "records.oss-tryghost-ghost.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-tryghost-ghost.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-tryghost-ghost.time": "GHSA公开时间：2026-10-27T14:44:19Z 至 2026-10-27T14:44:19Z", "records.oss-siyuan-note-siyuan.title": "siyuan：核实已公开的安全公告及修复范围", "records.oss-siyuan-note-siyuan.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-siyuan-note-siyuan.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-siyuan-note-siyuan.time": "GHSA公开时间：2026-10-27T14:43:57Z 至 2026-10-27T14:43:57Z", "records.oss-py-pdf-fpdf2.title": "fpdf2：核实已公开的安全公告及修复范围", "records.oss-py-pdf-fpdf2.body": "在本次GHSA公开时间窗口内确认了2项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-py-pdf-fpdf2.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-py-pdf-fpdf2.time": "GHSA公开时间：2026-10-27T14:43:16Z 至 2026-10-27T14:43:19Z", "records.oss-google-guava.title": "guava：核实已公开的安全公告及修复范围", "records.oss-google-guava.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-google-guava.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-google-guava.time": "GHSA公开时间：2026-10-27T14:27:53Z 至 2026-10-27T14:27:53Z", "records.oss-agno-agi-agno.title": "agno：核实已公开的安全公告及修复范围", "records.oss-agno-agi-agno.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-agno-agi-agno.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-agno-agi-agno.time": "GHSA公开时间：2026-10-27T13:30:41Z 至 2026-10-27T13:30:41Z", "records.oss-oauthlib-oauthlib.title": "oauthlib：核实已公开的安全公告及修复范围", "records.oss-oauthlib-oauthlib.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-oauthlib-oauthlib.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-oauthlib-oauthlib.time": "GHSA公开时间：2026-10-27T13:30:17Z 至 2026-10-27T13:30:17Z", "records.oss-project-monai-monai.title": "MONAI：核实已公开的安全公告及修复范围", "records.oss-project-monai-monai.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-project-monai-monai.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-project-monai-monai.time": "GHSA公开时间：2026-10-27T13:30:10Z 至 2026-10-27T13:30:10Z", "records.oss-dcmjs-org-dcmjs.title": "dcmjs：核实已公开的安全公告及修复范围", "records.oss-dcmjs-org-dcmjs.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-dcmjs-org-dcmjs.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-dcmjs-org-dcmjs.time": "GHSA公开时间：2026-10-27T13:29:57Z 至 2026-10-27T13:29:57Z", "records.oss-wailsapp-wails.title": "wails：核实已公开的安全公告及修复范围", "records.oss-wailsapp-wails.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-wailsapp-wails.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-wailsapp-wails.time": "GHSA公开时间：2026-10-27T13:29:47Z 至 2026-10-27T13:29:47Z", "records.oss-dolibarr-dolibarr.title": "dolibarr：核实已公开的安全公告及修复范围", "records.oss-dolibarr-dolibarr.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-dolibarr-dolibarr.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-dolibarr-dolibarr.time": "GHSA公开时间：2026-10-27T13:29:25Z 至 2026-10-27T13:29:25Z", "records.oss-ajenti-ajenti.title": "ajenti：核实已公开的安全公告及修复范围", "records.oss-ajenti-ajenti.body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "records.oss-ajenti-ajenti.action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "records.oss-ajenti-ajenti.time": "GHSA公开时间：2026-10-27T13:27:58Z 至 2026-10-27T13:27:58Z", "records.connectwise-validation.title": "ConnectWise：分阶段恢复的准备已完成，仍在等待第三方验证", "records.connectwise-validation.body": "27日14:30 UTC的更新说明，分阶段恢复的准备已完成，正在等待必需的第三方验证。这并非宣布已开始提供恢复访问或已全面恢复。Axcient Legacy Portal于22日恢复属于另一起PHP应对事件。", "records.connectwise-validation.action": "继续禁用相关连接，等待个别恢复通知。不要将“未发现加密备份归档遭入侵迹象”的说明，泛化为各Microsoft 365租户均未遭入侵。", "records.connectwise-validation.time": "10/27 23:30 JST 更新", "records.tailscale-four-fixes.title": "Tailscale：官方4项安全公告指定的最低修复版本为1.104.4", "records.tailscale-four-fixes.body": "TS-2026-014至017涉及SSH Unix socket转发、SSH内存DoS、Serve Unix后端及HTTP/2 capability混用。官方安全通报指定最低版本为1.104.4。另一方面，更新日志仍存在更新时差。不能将其认定为已修复Tailworm全部11项问题。", "records.tailscale-four-fixes.action": "核实实际运行的客户端是否为1.104.4或更高版本，并核对SSH/Serve的使用条件。如需临时停止SSH转发，应使用TS_SSH_DISABLE_FORWARDING=1并重启守护进程。不要将headscale或实验性连接器纳入相同的修复范围。", "records.tailscale-four-fixes.time": "持续核实10/26的安全通报及10/27的tag", "records.fireblocks-no-fix.title": "Fireblocks mpc-lib：评估修订后仍未提供修复版本", "records.fireblocks-no-fix.body": "CERT VU701544于27日14:45 UTC修订。可能从后代份额及chain code推导到同一MPC参与方的祖先或根份额，但这不等于突破阈值并获得完整的转账密钥。实际盗窃情况、金额及受害客户数量尚未公布。", "records.fireblocks-no-fix.action": "应按尚无修复版本处理，将chain code作为机密信息保护，并调查整个层级。不要将另一起eMudhra事件的Agent 2.4.4 / SDK 2.19.1当作此漏洞的修复版本。", "records.fireblocks-no-fix.time": "10/27 23:45 JST 修订", "records.fortinet-fips.title": "Fortinet FIPS：7.4应对版本与7.2标注不一致", "records.fortinet-fips.body": "27日的技术文章表示FIPS加固版本已经可用。7.4对应FIPS-CC-74-15 b9481。7.2的正文b9883与下载路径b9893不一致。7.0 FIPS已结束延长支持，本次无提供版本的计划。", "records.fortinet-fips.action": "通过官方ReadMe及支持下载页面核对型号与构建号。不要依据7.2中含糊的编号自动应用更新。不要将GA版本的加固表套用为尚未获取的PSIRT公告中各漏洞的最低修复版本。", "records.fortinet-fips.time": "10/27官方更新", "records.litellm-supplychain-response.title": "LiteLLM：分发渠道遭入侵后应撤销密钥并重建环境", "records.litellm-supplychain-response.body": "10月21日的事件已确认恶意1.107.0及容器实际被分发。23日的攻击链报告说明了从未撤销的master key获取publisher token等的过程。不要将3月另一起事件的受害数量套用于本次事件。", "records.litellm-supplychain-response.action": "核实相关时间段内的安装及执行路径。在简单执行pip更新之前，应先隔离并重建环境，撤销并更换当时可能被访问的密钥。本次产品GHSA修复版本与入侵后的安全核实属于不同事项。", "records.litellm-supplychain-response.time": "10/21事件 / 持续跟进10/23的分析", "records.malware-packages.title": "恶意包：单独核实GHSA malware分类的27项安全公告", "records.malware-packages.body": "包括trajmetrics 0.5.3、numprint 1.2.0、@azure-growth/signup-ux-components 1.2.2/1.2.3等。下方范围为GitHub安全公告标注的影响范围。不能据此认定所有名称相似的正规包均已遭入侵。不要将27项安全公告计为27家新增受害组织。", "records.malware-packages.action": "核对lockfile、SBOM及下载缓存，不要通过执行可疑制品来验证。如已安装或执行，应隔离并重建环境，撤销当时可能被访问的凭据。未列出修复版本，不代表存在安全版本，也不代表仅升级版本即可解决。", "records.malware-packages.time": "本次GHSA公开时间窗口 / malware分类", "caveats.0": "基准时间为2026-10-28 13:18:44 JST。获取的是基准时间之后的当前修订版，并不还原基准时间之前的所有版本。", "caveats.1": "核查了NVD公开与修订、GHSA reviewed/unreviewed/malware、KEV、国内外官方安全公告及所选事件的后续消息。这并非覆盖全球所有事件的统计。", "caveats.2": "公开与修订存在重复。不会将漏洞、安全公告、包、组织及受害人数相加作为事件数量。reviewed是GitHub上的分类，并不代表已确认实际利用。", "caveats.3": "本次调查数据涉及所选后续消息及安全公告中的要点。这不意味着过去尚未解决的事件已经消失，也请参阅历史台账。", "caveats.4": "收录于KEV表示已确认该漏洞遭到利用，并非确认所有集成相关组件的产品均已遭入侵。取证指示栏中的No不应理解为无需开展入侵调查。", "caveats.5": "获取失败及challenge响应保留在所获取原始资料的元数据中。不会将无法获取的信息计为更新0条。", "caveats.6": "更新最新日文台账。已保存的译文是标明原始基准时间的归档，不视为已完成新增信息的翻译。", "caveats.7": "首次获取NVD修订数据时超时。通过每批500条重新获取，已取得全部1,911条。也保存了首次失败的信息，不混淆获取0条与更新0条。", "report.title": "10月28日13:18 — 广泛的漏洞应对措施及现实影响", "report.headline": "需要尽快修复的问题，以及已经让日常生活停摆的事件。", "report.intro": "涵盖Brotli、Commerce的已知利用情况，GMO、@link的后续消息，以及网络设备、浏览器、AI、认证和开发基础设施。可通过不同列表分别查看实际损害与潜在风险。", "quick.0.title": "对日常生活与工作的实际影响", "quick.0.text": "附上来源，整理医疗预约、云服务、个人信息及金钱方面的影响。不估算未经确认的损失金额。", "quick.0.label": "影响列表", "quick.1.title": "公共基础设施的优先更新", "quick.1.text": "确认Brotli和Commerce已新增至KEV。按实际运行的产品及版本系列检查是否已修复。", "quick.1.label": "已确认的利用情况及应对措施", "quick.2.title": "AI、认证与开发基础设施", "quick.2.text": "根据各项安全公告的影响范围，核查MLflow、MCP、Authlib、Better Auth、GitPython等。", "quick.2.label": "MCP的额外配置", "quick.3.title": "终端与网络", "quick.3.text": "检查NetScaler、PAN-OS、WatchGuard、浏览器及邮件软件。计划发布与完成部署是不同事项。", "quick.3.label": "终端与设备", "ui.title": "事件与漏洞调查数据", "ui.intro": "这是基于公开一手资料的调查记录。整理时保留了条件与限定说明，并可追溯至官方说明。", "ui.cutoff": "调查基准时间", "ui.actions": "需要核实的事项", "ui.sources": "一手资料与来源", "ui.delta": "本次核实的登记信息及安全公告更新", "ui.scope-complement": "现有事件的应对措施及条件补充", "ui.reference-only": "公开时间等尚未确定的参考信息", "ui.notice": "本译文由Codex进行AI翻译，未经母语使用者校阅。请将产品名称、版本、配置及应对措施与原文和官方说明核对。", "ui.original": "日文原文", "ui.data": "以JSON格式获取翻译数据", "ui.home": "前往动效", "ui.languages": "选择语言", "ui.evidence": "获取的原始资料与调查方法", "ui.counts": "此处涉及的要点数量并非新增受害事件的数量。", "ui.pending": "正在准备翻译数据。", "records.kev-brotli-commerce.action": "确认 Brotli 1.2.1、Node.js 22.23.4 / 24.22.1 / 26.12.1 等各产品的修复情况。对于 Adobe，确认 APSB26-73 中各版本的七月累积更新。不要将 KEV 针对美国联邦机构规定的期限视为适用于所有用户的法定期限。" }, "provenance": { "engine": "OpenAI Codex CLI", "model_selection": "CLI default; not overridden", "prompt_version": "incident-translation-v1", "generated_at": "2026-10-28T05:50:44.633304+00:00", "usage": { "input_tokens": 19388, "cached_input_tokens": 17920, "cache_write_input_tokens": 0, "output_tokens": 118, "reasoning_output_tokens": 0 }, "human_reviewed": false }, "database": { "cutoff": "2026-10-28T04:18:44Z", "cutoff_jst": "2026-10-28T13:18:44+09:00", "delta_start": "2026-10-27T09:47:00Z", "counts": { "nvd_published": 626, "nvd_modified": 1911, "published_modified_overlap": 626, "ghsa": 664, "ghsa_unreviewed": 547, "ghsa_reviewed": 90, "ghsa_malware": 27, "ghsa_modified": 958, "ghsa_published_modified_overlap": 664, "ghsa_current_published_overlap": 561, "ghsa_previous_published_overlap": 0, "record_topic_groups": 65, "delta_topic_groups": 62, "scope_complement_topic_groups": 3, "reference_only_topic_groups": 0, "verified_response_records": 70, "deduplicated_previous_references": 21 }, "kev": { "catalog_version": "2026.10.27", "count": 1760, "same_bytes": false, "added_ids": [ "CVE-2026-111497", "CVE-2026-48356" ] }, "records": [ { "id": "gmo-domain-stop", "title": "GMO：犯罪者网站域名停用及补偿说明的后续消息", "body": "第13次通报确认，犯罪者网站的域名于10月28日04:00左右停用。停用并不意味着已收回信息、删除副本或完成服务恢复。第12次通报中最高300万日元的特别慰问金是一项附带条件的制度，并非损失总额或已支付金额。第12次通报的标题19:10与经过栏19:00存在不一致。", "action": "不要访问犯罪者网站或泄露资料，应核实官方的个别通知、替代环境及补偿条件。不要回应借机索取认证信息或手续费的联系。", "sources": [ { "name": "GMO第13報", "url": "https://group.gmo/info/alert/20261028/" }, { "name": "GMO第12報", "url": "https://group.gmo/info/alert/2026102705/" } ], "kind": "delta", "time": "10/28 04:00左右确认 / 11:00 JST 第13次通报", "cve_ids": [], "certainty": "confirmed-publication", "date": "2026-10-28" }, { "id": "atlink-beta", "title": "@link：部分医疗机构开展β版测试，并非全面恢复", "body": "10月28日12:30的更新表明，目前处于部分医疗机构开始测试使用云端β版的阶段。患者应用、Web预约、外部系统对接等仍然暂停。医疗机构的预约业务仍受影响，涉及泄露的数量也仍在调查中。", "action": "预约及变更事宜请直接向所使用的医疗机构确认。应区分计划恢复、计划退款与已经实施的事项，并核实恢复时的密码重设说明。", "sources": [ { "name": "@link運営状況", "url": "https://at-link.net/information/アットリンクへの不正アクセスおよびサービスの/" }, { "name": "メドレー", "url": "https://www.medley.jp/notice/20261015.html" } ], "kind": "delta", "time": "10/28 12:30 JST 更新", "cve_ids": [], "certainty": "confirmed-publication", "date": "2026-10-28" }, { "id": "railway-signups", "title": "Railway：新用户注册仍暂停，下次报告计划时间在基准时间之后", "body": "10月27日15:19 UTC的状态更新中，新用户注册仍暂停，恢复日期未定。应区分现有部署继续运行与构建、仪表板等功能故障。约100,000个工作区、最多1.85%表示环境变量可能受影响的范围，并非已确认的信息泄露人数。", "action": "在签发方撤销并重新签发旧密钥，同时开展审计。不要将计划于10月28日16:00 UTC发布的下次报告，视为截至本次基准时间已实现的恢复结果。", "sources": [ { "name": "Railway status", "url": "https://status.railway.com/" }, { "name": "公式予備報告", "url": "https://blog.railway.com/p/preliminary-report-october-security-incident" } ], "kind": "delta", "time": "10/28 00:19 JST 状态", "cve_ids": [], "certainty": "confirmed-publication", "date": "2026-10-28" }, { "id": "studio-reporting", "title": "Studio：计划于11月上旬开始受理联名报告", "body": "截至28日00:30的更新，尚未开始受理向个人信息保护委员会提交的联名报告。共同报告不包括向本人发出通知。已确认加密密钥被读取，且信息处于外部可获取状态，但实际被获取的信息数量尚未确定。", "action": "调查表单数据的实际使用情况，另行判断是否通知本人。外部API密钥应在签发方撤销。不要认为仅更新密钥就能消除过去信息可能被获取的情况。", "sources": [ { "name": "Studio公式ポータル", "url": "https://studio.design/ja/security/notice/2026-10-incident" } ], "kind": "delta", "time": "10/28 00:30 JST 更新", "cve_ids": [], "certainty": "confirmed-publication", "date": "2026-10-28" }, { "id": "kev-brotli-commerce", "title": "KEV：新增Brotli和Adobe Commerce，将已确认的利用情况纳入优先级判断", "body": "CISA 2026.10.27版共收录1,760条。新增CVE-2026-111497和CVE-2026-48356，截止日期为11月10日。这表示已确认漏洞遭到利用，并不意味着所有.NET、Node.js环境或商户均已遭入侵。未提供受害人数或实际损失金额。", "action": "确认 Brotli 1.2.1、Node.js 22.23.4 / 24.22.1 / 26.12.1 等各产品的修复情况。对于 Adobe，确认 APSB26-73 中各版本的七月累积更新。不要将 KEV 针对美国联邦机构规定的期限视为适用于所有用户的法定期限。", "sources": [ { "name": "CISA KEV", "url": "https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json" }, { "name": "Google Brotli", "url": "https://github.com/google/brotli/releases/tag/v1.2.1" }, { "name": "Node.js", "url": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases" }, { "name": "Adobe APSB26-73", "url": "https://www.adobe.com/trust/security/products/commerce/apsb26-73.html" } ], "kind": "delta", "time": "10/28 04:00:02 JST 目录发布", "cve_ids": [ "CVE-2026-111497", "CVE-2026-48356" ], "certainty": "confirmed-publication", "date": "2026-10-28" }, { "id": "dotnet-deploy", "title": "Brotli：区分.NET修复版本的提供与在使用环境中的部署", "body": ".NET 8.0.33 / 9.0.22 / 10.0.14 / 11 RC3为此前已提供的带外修复。.NET Framework不在影响范围内。Azure Functions于10月26日发布的官方说明称正在部署，并未表示已应用到所有运行中的实例。", "action": "依赖框架的部署应在更新运行时后重启；自包含部署应重新构建并重新发布；容器应重新构建并重新部署。Functions应核对实际运行的版本。", "sources": [ { "name": ".NET OOB", "url": "https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates/" }, { "name": "Azure Functions", "url": "https://azure.github.io/AppService/2026/10/26/dotnet-brotli-security-update-azure-functions.html" } ], "kind": "scope-complement", "time": "10/25修复 / 持续核实10/26的Functions说明", "cve_ids": [ "CVE-2026-111497" ], "certainty": "confirmed-publication", "date": "2026-10-28" }, { "id": "netscaler-php", "title": "Citrix NetScaler：按版本系列核实PHP修复版本", "body": "CTX697263建议将ADC/Gateway更新至14.1-73.49、13.1-64.32、14.1-73.49 FIPS、13.1-FIPS/NDcPP 13.1.37.286或更高版本。厂商表示，由其管理的云服务已完成处理，客户无需操作。", "action": "按版本系列核对自行运维的设备版本。不要仅凭PHP上游版本标识判断是否回移植了修复，应限制管理界面的访问并开展入侵调查。", "sources": [ { "name": "Citrix CTX697263", "url": "https://support.citrix.com/external/article/CTX697263/citrix-security-advisory-for-cve20261096.html" } ], "kind": "delta", "time": "上次基准时间之后的官方后续消息", "cve_ids": [ "CVE-2026-109618", "CVE-2026-109619" ], "certainty": "confirmed-publication", "date": "2026-10-28" }, { "id": "pan-branch-status", "title": "PAN-OS：区分已发布版本与ETA标注", "body": "官方表中列有12.2.4-h1 / 12.1.7-h11 / 11.2.10-h16等修复版本，但11.2.13-h4、11.2.16-h1等仍保留ETA标注。不要仅因已过计划日期就认定版本已经发布。这是管理面的PHP问题，并非所有数据面通信都具备相同的受影响条件。", "action": "通过官方AffectedVersions表核实各版本系列实际已发布的版本并更新。将管理接口限制为仅允许可信来源连接，并在更新之外另行检查入侵迹象。", "sources": [ { "name": "Palo Alto Networks", "url": "https://security.paloaltonetworks.com/CVE-2026-109618" } ], "kind": "delta", "time": "10/27官方修订的当前表格", "cve_ids": [ "CVE-2026-109618", "CVE-2026-109619" ], "certainty": "confirmed-publication", "date": "2026-10-28" }, { "id": "watchguard-fireware", "title": "WatchGuard：18项安全公告，核实AD集成条件及Windows客户端", "body": "10月27日的官方列表包括Fireware的17项安全公告和Windows Mobile VPN SSL的1项安全公告。AD认证堆溢出问题需要满足AD配置等条件。VPN客户端的本地通信窃听问题也涉及Windows端。厂商在相关公告中表示尚未获悉实际利用情况。", "action": "按版本系列更新，如Fireware 2026.4 / 12.12.4，T15/T35则更新至12.5.22等。针对CVE-2026-115495，应将Windows VPN客户端更新至2026.4，不要只更新Firebox设备。Solution栏与产品表的表述差异应对照原文核实。", "sources": [ { "name": "WatchGuard PSIRT", "url": "https://psirt.watchguard.com/" }, { "name": "AD認証", "url": "https://psirt.watchguard.com/CVE-2026-112709/" }, { "name": "Windows VPN", "url": "https://psirt.watchguard.com/CVE-2026-115495/" } ], "kind": "delta", "time": "10/27公布", "cve_ids": [ "CVE-2026-112709", "CVE-2026-112710", "CVE-2026-115495" ], "certainty": "confirmed-publication", "date": "2026-10-28" }, { "id": "browser-mail", "title": "浏览器与邮件：Firefox / ESR / Thunderbird / Chrome更新", "body": "Mozilla于10月27日发布Firefox 159、ESR 153.6 / 115.44、Thunderbird 159 / 153.6。Chrome稳定版正分阶段推送，Windows/Mac版本为156.0.8078.73/.74，Linux/Android版本为156.0.8078.73。安全公告数量并非受害事件数量。", "action": "执行更新并重启。核实适合操作系统及企业管理政策的受支持版本系列，不要为Chrome尚未公开的细节添加虚构的CVE或零日漏洞认定。", "sources": [ { "name": "Mozilla", "url": "https://www.mozilla.org/en-US/security/advisories/" }, { "name": "Firefox159", "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/" }, { "name": "Chrome releases", "url": "https://chromereleases.googleblog.com/" } ], "kind": "delta", "time": "10/27发布", "cve_ids": [], "certainty": "confirmed-publication", "date": "2026-10-28" }, { "id": "creative-cloud", "title": "Creative Cloud Windows：修复本地权限提升问题", "body": "APSB26-135针对Windows版6.10及更早版本的搜索路径问题，在6.11中进行了修复。厂商表示没有已知的实际利用情况。这并非确认用户已遭入侵的公告。", "action": "将Creative Cloud Desktop更新至6.11或更高版本。核实已部署终端的实际版本。", "sources": [ { "name": "Adobe APSB26-135", "url": "https://www.adobe.com/trust/security/products/creative-cloud/apsb26-135.html" } ], "kind": "delta", "time": "10/27安全公告", "cve_ids": [ "CVE-2026-104349" ], "certainty": "confirmed-publication", "date": "2026-10-28" }, { "id": "oss-mlflow-mlflow", "title": "MLflow：文件读取、scorer执行及在trace中记录密钥", "body": "影响范围不仅包括未启用认证的服务器，部分问题也涉及使用basic-auth的低权限用户。其中包括CrewAI autolog将API密钥记录到trace中的问题。仅凭本资料无法确定实际受害人数或事件数量。", "action": "更新至3.17.0。限制公开访问，检查trace和OTLP输出目的地，并撤销已暴露的提供商密钥。", "sources": [ { "name": "GHSA-m65p-9j7q-6w33", "url": "https://github.com/mlflow/mlflow/security/advisories/GHSA-m65p-9j7q-6w33" }, { "name": "GHSA-j7qq-vr8c-xvw3", "url": "https://github.com/mlflow/mlflow/security/advisories/GHSA-j7qq-vr8c-xvw3" }, { "name": "GHSA-26p8-2jq9-3vq9", "url": "https://github.com/mlflow/mlflow/security/advisories/GHSA-26p8-2jq9-3vq9" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T21:26:32Z 至 2026-10-27T21:26:56Z", "cve_ids": [ "CVE-2026-116690", "CVE-2026-116691", "CVE-2026-116692" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-m65p-9j7q-6w33", "summary": "MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source", "url": "https://github.com/mlflow/mlflow/security/advisories/GHSA-m65p-9j7q-6w33", "published_at": "2026-10-27T21:26:56Z", "updated_at": "2026-10-27T21:26:56Z", "packages": [ { "package": { "ecosystem": "pip", "name": "mlflow" }, "vulnerable_version_range": ">= 3.10.0, < 3.17.0", "first_patched_version": "3.17.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-j7qq-vr8c-xvw3", "summary": "MLflow CrewAI autologging records LLM provider API keys in logged trace spans", "url": "https://github.com/mlflow/mlflow/security/advisories/GHSA-j7qq-vr8c-xvw3", "published_at": "2026-10-27T21:26:39Z", "updated_at": "2026-10-27T21:26:40Z", "packages": [ { "package": { "ecosystem": "pip", "name": "mlflow" }, "vulnerable_version_range": ">= 2.19.0, < 3.17.0", "first_patched_version": "3.17.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-26p8-2jq9-3vq9", "summary": "MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules", "url": "https://github.com/mlflow/mlflow/security/advisories/GHSA-26p8-2jq9-3vq9", "published_at": "2026-10-27T21:26:32Z", "updated_at": "2026-10-27T21:26:34Z", "packages": [ { "package": { "ecosystem": "pip", "name": "mlflow" }, "vulnerable_version_range": ">= 3.12.0rc0, < 3.17.0", "first_patched_version": "3.17.0", "vulnerable_functions": [] } ] } ] }, { "id": "oss-datadog-dd-trace-js", "title": "dd-trace-js：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-x94g-w73q-hpcw", "url": "https://github.com/DataDog/dd-trace-js/security/advisories/GHSA-x94g-w73q-hpcw" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T21:07:25Z 至 2026-10-27T21:07:25Z", "cve_ids": [ "CVE-2026-116693" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-x94g-w73q-hpcw", "summary": "dd-trace: ReDOS in URL query string obfuscation", "url": "https://github.com/DataDog/dd-trace-js/security/advisories/GHSA-x94g-w73q-hpcw", "published_at": "2026-10-27T21:07:25Z", "updated_at": "2026-10-27T21:07:27Z", "packages": [ { "package": { "ecosystem": "npm", "name": "dd-trace" }, "vulnerable_version_range": ">= 2.0.0, < 5.131.1", "first_patched_version": "5.131.1", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "dd-trace" }, "vulnerable_version_range": ">= 6.0.0, < 6.20.1", "first_patched_version": "6.20.1", "vulnerable_functions": [] } ] } ] }, { "id": "oss-tinymce-tinymce", "title": "tinymce：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-mf2p-h6hf-fcwm", "url": "https://github.com/tinymce/tinymce/security/advisories/GHSA-mf2p-h6hf-fcwm" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T21:07:12Z 至 2026-10-27T21:07:12Z", "cve_ids": [ "CVE-2026-116675" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-mf2p-h6hf-fcwm", "summary": "TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization", "url": "https://github.com/tinymce/tinymce/security/advisories/GHSA-mf2p-h6hf-fcwm", "published_at": "2026-10-27T21:07:12Z", "updated_at": "2026-10-27T21:07:13Z", "packages": [ { "package": { "ecosystem": "npm", "name": "tinymce" }, "vulnerable_version_range": ">= 8.5.1, < 8.9.3", "first_patched_version": "8.9.3", "vulnerable_functions": [] }, { "package": { "ecosystem": "nuget", "name": "TinyMCE" }, "vulnerable_version_range": ">= 8.5.1, < 8.9.3", "first_patched_version": "8.9.3", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "tinymce/tinymce" }, "vulnerable_version_range": ">= 8.5.1, < 8.9.3", "first_patched_version": "8.9.3", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "tinymce" }, "vulnerable_version_range": "= 7.9.3", "first_patched_version": "7.9.4", "vulnerable_functions": [] }, { "package": { "ecosystem": "nuget", "name": "TinyMCE" }, "vulnerable_version_range": "= 7.9.3", "first_patched_version": "7.9.4", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "tinymce/tinymce" }, "vulnerable_version_range": "= 7.9.3", "first_patched_version": "7.9.4", "vulnerable_functions": [] } ] } ] }, { "id": "oss-modelcontextprotocol-python-sdk", "title": "MCP Python SDK：audience验证及重定向、schema引用", "body": "应区分bearer token的目标resource验证、跨源重定向时转发自定义header/body，以及outputSchema外部引用导致的SSRF或服务停止。不要将其认定为单独的Authorization header泄露。仅凭本资料无法确定实际受害人数或事件数量。", "action": "更新至1.30.0 / 2.2.0或更高版本。audience防护还需要validate_token_resource=True、resource_server_url及返回AccessToken.resource。仅更新版本不会启用验证。", "sources": [ { "name": "GHSA-w4fh-qvv9-3v23", "url": "https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-w4fh-qvv9-3v23" }, { "name": "GHSA-5h93-6whr-6q8j", "url": "https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-5h93-6whr-6q8j" }, { "name": "GHSA-rwrf-2pqf-9j8j", "url": "https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-rwrf-2pqf-9j8j" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T21:05:29Z 至 2026-10-27T21:06:59Z", "cve_ids": [ "CVE-2026-116684", "CVE-2026-116685", "CVE-2026-116686" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-w4fh-qvv9-3v23", "summary": "Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server", "url": "https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-w4fh-qvv9-3v23", "published_at": "2026-10-27T21:06:59Z", "updated_at": "2026-10-27T21:07:01Z", "packages": [ { "package": { "ecosystem": "pip", "name": "mcp" }, "vulnerable_version_range": ">= 2.0.0, < 2.2.0", "first_patched_version": "2.2.0", "vulnerable_functions": [] }, { "package": { "ecosystem": "pip", "name": "mcp" }, "vulnerable_version_range": ">= 1.10.0, < 1.30.0", "first_patched_version": "1.30.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-5h93-6whr-6q8j", "summary": "Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies", "url": "https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-5h93-6whr-6q8j", "published_at": "2026-10-27T21:05:34Z", "updated_at": "2026-10-27T21:05:36Z", "packages": [ { "package": { "ecosystem": "pip", "name": "mcp" }, "vulnerable_version_range": ">= 2.0.0, < 2.2.0", "first_patched_version": "2.2.0", "vulnerable_functions": [] }, { "package": { "ecosystem": "pip", "name": "mcp" }, "vulnerable_version_range": ">= 1.8.0, < 1.30.0", "first_patched_version": "1.30.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-rwrf-2pqf-9j8j", "summary": "Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas", "url": "https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-rwrf-2pqf-9j8j", "published_at": "2026-10-27T21:05:29Z", "updated_at": "2026-10-27T21:05:30Z", "packages": [ { "package": { "ecosystem": "pip", "name": "mcp" }, "vulnerable_version_range": ">= 2.0.0, < 2.2.0", "first_patched_version": "2.2.0", "vulnerable_functions": [] }, { "package": { "ecosystem": "pip", "name": "mcp" }, "vulnerable_version_range": ">= 1.10.0, < 1.30.0", "first_patched_version": "1.30.0", "vulnerable_functions": [] } ] } ] }, { "id": "oss-open-telemetry-opentelemetry-python", "title": "opentelemetry-python：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-f5m9-jfrj-jjj7", "url": "https://github.com/open-telemetry/opentelemetry-python/security/advisories/GHSA-f5m9-jfrj-jjj7" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T21:06:54Z 至 2026-10-27T21:06:54Z", "cve_ids": [ "CVE-2026-116694" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-f5m9-jfrj-jjj7", "summary": "OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation", "url": "https://github.com/open-telemetry/opentelemetry-python/security/advisories/GHSA-f5m9-jfrj-jjj7", "published_at": "2026-10-27T21:06:54Z", "updated_at": "2026-10-27T21:06:56Z", "packages": [ { "package": { "ecosystem": "pip", "name": "opentelemetry-propagator-jaeger" }, "vulnerable_version_range": "<= 1.44.0", "first_patched_version": "1.45.0", "vulnerable_functions": [] } ] } ] }, { "id": "oss-ckeditor-ckeditor5", "title": "ckeditor5：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了2项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-v6mg-96c6-gmpq", "url": "https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-v6mg-96c6-gmpq" }, { "name": "GHSA-rh54-vffm-5fvp", "url": "https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-rh54-vffm-5fvp" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T21:05:06Z 至 2026-10-27T21:05:13Z", "cve_ids": [ "CVE-2026-116687", "CVE-2026-116688" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-v6mg-96c6-gmpq", "summary": "CKEditor: Cross-site scripting (XSS) in the engine package", "url": "https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-v6mg-96c6-gmpq", "published_at": "2026-10-27T21:05:13Z", "updated_at": "2026-10-27T21:05:13Z", "packages": [ { "package": { "ecosystem": "npm", "name": "ckeditor5" }, "vulnerable_version_range": ">= 29.0.0, < 47.7.4", "first_patched_version": "47.7.4", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "@ckeditor/ckeditor5-engine" }, "vulnerable_version_range": ">= 29.0.0, < 47.7.4", "first_patched_version": "47.7.4", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "ckeditor5" }, "vulnerable_version_range": ">= 48.0.0, < 48.5.1", "first_patched_version": "48.5.1", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "@ckeditor/ckeditor5-engine" }, "vulnerable_version_range": ">= 48.0.0, < 48.5.1", "first_patched_version": "48.5.1", "vulnerable_functions": [] } ] }, { "id": "GHSA-rh54-vffm-5fvp", "summary": "CKEditor: Cross-site scripting (XSS) in the engine package", "url": "https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-rh54-vffm-5fvp", "published_at": "2026-10-27T21:05:06Z", "updated_at": "2026-10-27T21:05:07Z", "packages": [ { "package": { "ecosystem": "npm", "name": "ckeditor5" }, "vulnerable_version_range": ">= 45.0.0, < 47.7.4", "first_patched_version": "47.7.4", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "@ckeditor/ckeditor5-engine" }, "vulnerable_version_range": ">= 45.0.0, < 47.7.4", "first_patched_version": "47.7.4", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "ckeditor5" }, "vulnerable_version_range": ">= 48.0.0, < 48.5.1", "first_patched_version": "48.5.1", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "@ckeditor/ckeditor5-engine" }, "vulnerable_version_range": ">= 48.0.0, < 48.5.1", "first_patched_version": "48.5.1", "vulnerable_functions": [] } ] } ] }, { "id": "oss-m1k1o-neko", "title": "neko：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-5cp7-fp4j-wwcv", "url": "https://github.com/m1k1o/neko/security/advisories/GHSA-5cp7-fp4j-wwcv" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T21:04:57Z 至 2026-10-27T21:04:57Z", "cve_ids": [ "CVE-2026-116679" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-5cp7-fp4j-wwcv", "summary": "Neko: Authorization bypass in legacy WebRTC input handling", "url": "https://github.com/m1k1o/neko/security/advisories/GHSA-5cp7-fp4j-wwcv", "published_at": "2026-10-27T21:04:57Z", "updated_at": "2026-10-27T21:04:58Z", "packages": [ { "package": { "ecosystem": "go", "name": "github.com/m1k1o/neko/server" }, "vulnerable_version_range": ">= 0.0.0-20250401220545-fe94c999c6af, < 0.0.0-20260805142851-395ca1a6f62b", "first_patched_version": "0.0.0-20260805142851-395ca1a6f62b", "vulnerable_functions": [] } ] } ] }, { "id": "oss-runatlantis-atlantis", "title": "Atlantis：plan阶段的workspace命令注入", "body": "执行plan的PR中，atlantis.yaml的workspace是攻击入口。即使没有自定义工作流或apply权限，也可能满足利用条件。仅凭本资料无法确定实际受害人数或事件数量。", "action": "更新至0.47.1。限制对不可信PR执行plan，并检查runner的云服务及VCS权限。", "sources": [ { "name": "GHSA-rjh2-4xgw-p2hj", "url": "https://github.com/runatlantis/atlantis/security/advisories/GHSA-rjh2-4xgw-p2hj" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T21:04:50Z 至 2026-10-27T21:04:50Z", "cve_ids": [ "CVE-2026-116676" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-rjh2-4xgw-p2hj", "summary": "Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan", "url": "https://github.com/runatlantis/atlantis/security/advisories/GHSA-rjh2-4xgw-p2hj", "published_at": "2026-10-27T21:04:50Z", "updated_at": "2026-10-27T21:04:50Z", "packages": [ { "package": { "ecosystem": "go", "name": "github.com/runatlantis/atlantis" }, "vulnerable_version_range": ">= 0.4.0, <= 0.47.0", "first_patched_version": "0.47.1", "vulnerable_functions": [] } ] } ] }, { "id": "oss-gtsteffaniak-filebrowser", "title": "filebrowser：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-mgqf-5mf5-prfj", "url": "https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-mgqf-5mf5-prfj" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T21:04:40Z 至 2026-10-27T21:04:40Z", "cve_ids": [ "CVE-2026-116682" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-mgqf-5mf5-prfj", "summary": "FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory", "url": "https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-mgqf-5mf5-prfj", "published_at": "2026-10-27T21:04:40Z", "updated_at": "2026-10-27T21:04:41Z", "packages": [ { "package": { "ecosystem": "go", "name": "github.com/gtsteffaniak/filebrowser/backend" }, "vulnerable_version_range": "< 0.0.0-20260814233832-4126edeb07a0", "first_patched_version": "0.0.0-20260814233832-4126edeb07a0", "vulnerable_functions": [] } ] } ] }, { "id": "oss-nodejs-undici", "title": "undici：TLS验证、缓存边界及DoS", "body": "涉及TLS选项传递、跨源重定向与共享缓存、WebSocket缓冲等不同条件下的问题。不要将Node.js内置fetch与单独的npm依赖视为同一个已部署版本。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对相关版本系列6.29.1 / 7.30.1 / 8.12.2。分别更新npm依赖与内置运行时，并检查缓存共享、重定向和TLS配置。", "sources": [ { "name": "GHSA-4w7w-5xrc-9h26", "url": "https://github.com/nodejs/undici/security/advisories/GHSA-4w7w-5xrc-9h26" }, { "name": "GHSA-2m5v-pch6-74hx", "url": "https://github.com/nodejs/undici/security/advisories/GHSA-2m5v-pch6-74hx" }, { "name": "GHSA-qrxm-fqhp-jwvm", "url": "https://github.com/nodejs/undici/security/advisories/GHSA-qrxm-fqhp-jwvm" }, { "name": "GHSA-9fm3-97px-rjf6", "url": "https://github.com/nodejs/undici/security/advisories/GHSA-9fm3-97px-rjf6" }, { "name": "GHSA-55wc-3pg8-jfw6", "url": "https://github.com/nodejs/undici/security/advisories/GHSA-55wc-3pg8-jfw6" }, { "name": "GHSA-qq8j-7v2v-3rwp", "url": "https://github.com/nodejs/undici/security/advisories/GHSA-qq8j-7v2v-3rwp" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T16:09:45Z 至 2026-10-27T19:02:31Z", "cve_ids": [ "CVE-2026-109829", "CVE-2026-109383", "CVE-2026-87018", "CVE-2026-109932", "CVE-2026-87029", "CVE-2026-109855" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-4w7w-5xrc-9h26", "summary": "undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects", "url": "https://github.com/nodejs/undici/security/advisories/GHSA-4w7w-5xrc-9h26", "published_at": "2026-10-27T19:02:31Z", "updated_at": "2026-10-27T19:02:32Z", "packages": [ { "package": { "ecosystem": "npm", "name": "undici" }, "vulnerable_version_range": ">= 7.0.0, < 7.30.1", "first_patched_version": "7.30.1", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "undici" }, "vulnerable_version_range": ">= 8.0.0, < 8.12.2", "first_patched_version": "8.12.2", "vulnerable_functions": [] } ] }, { "id": "GHSA-2m5v-pch6-74hx", "summary": "undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent", "url": "https://github.com/nodejs/undici/security/advisories/GHSA-2m5v-pch6-74hx", "published_at": "2026-10-27T19:02:26Z", "updated_at": "2026-10-27T19:02:27Z", "packages": [ { "package": { "ecosystem": "npm", "name": "undici" }, "vulnerable_version_range": ">= 4.0.0, < 6.29.1", "first_patched_version": "6.29.1", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "undici" }, "vulnerable_version_range": ">= 7.0.0, < 7.30.1", "first_patched_version": "7.30.1", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "undici" }, "vulnerable_version_range": ">= 8.0.0, < 8.12.2", "first_patched_version": "8.12.2", "vulnerable_functions": [] } ] }, { "id": "GHSA-qrxm-fqhp-jwvm", "summary": "undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation", "url": "https://github.com/nodejs/undici/security/advisories/GHSA-qrxm-fqhp-jwvm", "published_at": "2026-10-27T19:02:21Z", "updated_at": "2026-10-27T19:02:22Z", "packages": [ { "package": { "ecosystem": "npm", "name": "undici" }, "vulnerable_version_range": ">= 4.2.1, < 6.29.1", "first_patched_version": "6.29.1", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "undici" }, "vulnerable_version_range": ">= 7.0.0, < 7.30.1", "first_patched_version": "7.30.1", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "undici" }, "vulnerable_version_range": ">= 8.0.0, < 8.12.2", "first_patched_version": "8.12.2", "vulnerable_functions": [] } ] }, { "id": "GHSA-9fm3-97px-rjf6", "summary": "undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering", "url": "https://github.com/nodejs/undici/security/advisories/GHSA-9fm3-97px-rjf6", "published_at": "2026-10-27T19:02:15Z", "updated_at": "2026-10-27T19:02:17Z", "packages": [ { "package": { "ecosystem": "npm", "name": "undici" }, "vulnerable_version_range": ">= 5.15.0, < 6.29.1", "first_patched_version": "6.29.1", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "undici" }, "vulnerable_version_range": ">= 7.0.0, < 7.30.1", "first_patched_version": "7.30.1", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "undici" }, "vulnerable_version_range": ">= 8.0.0, < 8.12.2", "first_patched_version": "8.12.2", "vulnerable_functions": [] } ] }, { "id": "GHSA-55wc-3pg8-jfw6", "summary": "undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor", "url": "https://github.com/nodejs/undici/security/advisories/GHSA-55wc-3pg8-jfw6", "published_at": "2026-10-27T19:02:10Z", "updated_at": "2026-10-27T19:02:12Z", "packages": [ { "package": { "ecosystem": "npm", "name": "undici" }, "vulnerable_version_range": ">= 7.15.0, < 7.30.1", "first_patched_version": "7.30.1", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "undici" }, "vulnerable_version_range": ">= 8.0.0, < 8.12.2", "first_patched_version": "8.12.2", "vulnerable_functions": [] } ] }, { "id": "GHSA-qq8j-7v2v-3rwp", "summary": "undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake", "url": "https://github.com/nodejs/undici/security/advisories/GHSA-qq8j-7v2v-3rwp", "published_at": "2026-10-27T16:09:45Z", "updated_at": "2026-10-27T16:09:47Z", "packages": [ { "package": { "ecosystem": "npm", "name": "undici" }, "vulnerable_version_range": ">= 8.11.0, < 8.11.2", "first_patched_version": "8.11.2", "vulnerable_functions": [] } ] } ] }, { "id": "oss-modelcontextprotocol-typescript-sdk", "title": "MCP TypeScript SDK：HTTP正文与批处理长度上限", "body": "HTTP传输层或处理程序中，过大的正文及JSON-RPC批处理会导致资源消耗问题。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对实际使用的包，如sdk 1.30.1、server/node 2.1.0、hono 2.0.1等，并在反向代理上设置上限。", "sources": [ { "name": "GHSA-f897-62hf-6gxq", "url": "https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-f897-62hf-6gxq" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T19:02:00Z 至 2026-10-27T19:02:00Z", "cve_ids": [], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-f897-62hf-6gxq", "summary": "MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length", "url": "https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-f897-62hf-6gxq", "published_at": "2026-10-27T19:02:00Z", "updated_at": "2026-10-27T19:02:02Z", "packages": [ { "package": { "ecosystem": "npm", "name": "@modelcontextprotocol/sdk" }, "vulnerable_version_range": ">= 1.10.0, < 1.30.1", "first_patched_version": "1.30.1", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "@modelcontextprotocol/server" }, "vulnerable_version_range": ">= 2.0.0, < 2.1.0", "first_patched_version": "2.1.0", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "@modelcontextprotocol/node" }, "vulnerable_version_range": ">= 2.0.0, < 2.1.0", "first_patched_version": "2.1.0", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "@modelcontextprotocol/hono" }, "vulnerable_version_range": ">= 2.0.0, < 2.0.1", "first_patched_version": "2.0.1", "vulnerable_functions": [] } ] } ] }, { "id": "oss-symfony-symfony", "title": "symfony：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了2项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-2v3c-qxhr-7vpv", "url": "https://github.com/symfony/symfony/security/advisories/GHSA-2v3c-qxhr-7vpv" }, { "name": "GHSA-r925-mgvr-h9cc", "url": "https://github.com/symfony/symfony/security/advisories/GHSA-r925-mgvr-h9cc" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T19:01:39Z 至 2026-10-27T19:01:50Z", "cve_ids": [ "CVE-2026-109413", "CVE-2026-108082" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-2v3c-qxhr-7vpv", "summary": "Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process", "url": "https://github.com/symfony/symfony/security/advisories/GHSA-2v3c-qxhr-7vpv", "published_at": "2026-10-27T19:01:50Z", "updated_at": "2026-10-27T19:01:52Z", "packages": [ { "package": { "ecosystem": "composer", "name": "symfony/symfony" }, "vulnerable_version_range": ">= 2.0.0, < 5.4.54", "first_patched_version": "5.4.54", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "symfony/symfony" }, "vulnerable_version_range": ">= 6.0.0, < 6.4.45", "first_patched_version": "6.4.45", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "symfony/symfony" }, "vulnerable_version_range": ">= 7.0.0, < 7.4.18", "first_patched_version": "7.4.18", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "symfony/symfony" }, "vulnerable_version_range": ">= 8.0.0, < 8.1.6", "first_patched_version": "8.1.6", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "symfony/yaml" }, "vulnerable_version_range": ">= 2.0.0, < 5.4.54", "first_patched_version": "5.4.54", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "symfony/yaml" }, "vulnerable_version_range": ">= 6.0.0, < 6.4.45", "first_patched_version": "6.4.45", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "symfony/yaml" }, "vulnerable_version_range": ">= 7.0.0, < 7.4.18", "first_patched_version": "7.4.18", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "symfony/yaml" }, "vulnerable_version_range": ">= 8.0.0, < 8.1.6", "first_patched_version": "8.1.6", "vulnerable_functions": [] } ] }, { "id": "GHSA-r925-mgvr-h9cc", "summary": "Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header", "url": "https://github.com/symfony/symfony/security/advisories/GHSA-r925-mgvr-h9cc", "published_at": "2026-10-27T19:01:39Z", "updated_at": "2026-10-27T19:01:40Z", "packages": [ { "package": { "ecosystem": "composer", "name": "symfony/http-foundation" }, "vulnerable_version_range": ">= 6.0.1, < 6.4.46", "first_patched_version": "6.4.46", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "symfony/http-foundation" }, "vulnerable_version_range": ">= 7.0.0, < 7.4.19", "first_patched_version": "7.4.19", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "symfony/http-foundation" }, "vulnerable_version_range": ">= 8.0.0, < 8.1.7", "first_patched_version": "8.1.7", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "symfony/symfony" }, "vulnerable_version_range": ">= 6.0.1, < 6.4.46", "first_patched_version": "6.4.46", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "symfony/symfony" }, "vulnerable_version_range": ">= 7.0.0, < 7.4.19", "first_patched_version": "7.4.19", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "symfony/symfony" }, "vulnerable_version_range": ">= 8.0.0, < 8.1.7", "first_patched_version": "8.1.7", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "symfony/http-foundation" }, "vulnerable_version_range": ">= 4.1.0, < 5.4.54", "first_patched_version": "5.4.54", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "symfony/symfony" }, "vulnerable_version_range": ">= 4.1.0, < 5.4.54", "first_patched_version": "5.4.54", "vulnerable_functions": [] } ] } ] }, { "id": "oss-go-jose-go-jose", "title": "go-jose：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-mgcc-cww5-fp2q", "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-mgcc-cww5-fp2q" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T19:01:30Z 至 2026-10-27T19:01:30Z", "cve_ids": [ "CVE-2026-116587" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-mgcc-cww5-fp2q", "summary": "Go JOSE: DoS when parsing JWKs that contain RSA keys", "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-mgcc-cww5-fp2q", "published_at": "2026-10-27T19:01:30Z", "updated_at": "2026-10-27T19:01:32Z", "packages": [ { "package": { "ecosystem": "go", "name": "github.com/go-jose/go-jose/v4" }, "vulnerable_version_range": "<= 4.1.5", "first_patched_version": "4.1.6", "vulnerable_functions": [] }, { "package": { "ecosystem": "go", "name": "github.com/go-jose/go-jose/v3" }, "vulnerable_version_range": "<= 3.0.5", "first_patched_version": null, "vulnerable_functions": [] } ] } ] }, { "id": "oss-ctfer-io-terraform-provider-ctfd", "title": "terraform-provider-ctfd：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-vg84-c5mg-76xh", "url": "https://github.com/ctfer-io/terraform-provider-ctfd/security/advisories/GHSA-vg84-c5mg-76xh" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T19:00:50Z 至 2026-10-27T19:00:50Z", "cve_ids": [ "CVE-2026-116683" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-vg84-c5mg-76xh", "summary": "CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values", "url": "https://github.com/ctfer-io/terraform-provider-ctfd/security/advisories/GHSA-vg84-c5mg-76xh", "published_at": "2026-10-27T19:00:50Z", "updated_at": "2026-10-27T19:00:51Z", "packages": [ { "package": { "ecosystem": "go", "name": "github.com/ctfer-io/terraform-provider-ctfd" }, "vulnerable_version_range": ">= 0.1.5, <= 1.1.0", "first_patched_version": null, "vulnerable_functions": [] }, { "package": { "ecosystem": "go", "name": "github.com/ctfer-io/terraform-provider-ctfd/v2" }, "vulnerable_version_range": "< 2.8.2", "first_patched_version": "2.8.2", "vulnerable_functions": [] } ] } ] }, { "id": "oss-hydra-ecosystem-hydra", "title": "hydra：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-wf6j-7hvr-gr93", "url": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-757g-8w3h-hp29" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T17:08:41Z 至 2026-10-27T17:08:41Z", "cve_ids": [], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-wf6j-7hvr-gr93", "summary": "Hydra legacy target blacklist permits unsafe PyYAML loading", "url": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-757g-8w3h-hp29", "published_at": "2026-10-27T17:08:41Z", "updated_at": "2026-10-27T17:08:42Z", "packages": [ { "package": { "ecosystem": "pip", "name": "hydra-core" }, "vulnerable_version_range": ">= 1.3.6, < 1.3.8", "first_patched_version": "1.3.8", "vulnerable_functions": [] }, { "package": { "ecosystem": "pip", "name": "hydra-core" }, "vulnerable_version_range": ">= 1.4.0.dev9, < 1.4.0rc3", "first_patched_version": "1.4.0rc3", "vulnerable_functions": [] } ] } ] }, { "id": "oss-ljharb-qs", "title": "qs：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-6pq8-jhm2-2vcw", "url": "https://github.com/ljharb/qs/security/advisories/GHSA-6pq8-jhm2-2vcw" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T16:10:55Z 至 2026-10-27T16:10:55Z", "cve_ids": [ "CVE-2026-110816" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-6pq8-jhm2-2vcw", "summary": "qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)", "url": "https://github.com/ljharb/qs/security/advisories/GHSA-6pq8-jhm2-2vcw", "published_at": "2026-10-27T16:10:55Z", "updated_at": "2026-10-27T16:10:58Z", "packages": [ { "package": { "ecosystem": "npm", "name": "qs" }, "vulnerable_version_range": ">= 6.7.0, <= 6.16.0", "first_patched_version": "6.16.1", "vulnerable_functions": [] } ] } ] }, { "id": "oss-authlib-authlib", "title": "Authlib：签名、nonce、audience等验证边界", "body": "包括空签名、空HMAC密钥、算法混淆、request_uri SSRF等问题。仅使用1.9.0不足以修复空HMAC密钥问题。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核实是否为1.9.1或更高版本。核对issuer、audience、nonce、允许的算法及密钥配置，并限制request_uri的获取目的地。", "sources": [ { "name": "GHSA-8m4g-j4wp-wgcg", "url": "https://github.com/authlib/authlib/security/advisories/GHSA-8m4g-j4wp-wgcg" }, { "name": "GHSA-x4rv-c3wx-4cr8", "url": "https://github.com/authlib/authlib/security/advisories/GHSA-x4rv-c3wx-4cr8" }, { "name": "GHSA-c5mf-xmp2-59rc", "url": "https://github.com/authlib/authlib/security/advisories/GHSA-c5mf-xmp2-59rc" }, { "name": "GHSA-fch4-3c6x-j4gc", "url": "https://github.com/authlib/authlib/security/advisories/GHSA-fch4-3c6x-j4gc" }, { "name": "GHSA-q686-2qmg-hqc7", "url": "https://github.com/authlib/authlib/security/advisories/GHSA-q686-2qmg-hqc7" }, { "name": "GHSA-7vr2-2fgp-9w7p", "url": "https://github.com/authlib/authlib/security/advisories/GHSA-7vr2-2fgp-9w7p" }, { "name": "GHSA-jj7h-c3hg-m23x", "url": "https://github.com/authlib/authlib/security/advisories/GHSA-jj7h-c3hg-m23x" }, { "name": "GHSA-6v38-4h7w-rj9h", "url": "https://github.com/authlib/authlib/security/advisories/GHSA-6v38-4h7w-rj9h" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T14:50:18Z 至 2026-10-27T16:09:22Z", "cve_ids": [ "CVE-2026-114616", "CVE-2026-114620", "CVE-2026-114617", "CVE-2026-114618", "CVE-2026-114619", "CVE-2026-114615", "CVE-2026-114614", "CVE-2026-96760" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-8m4g-j4wp-wgcg", "summary": "Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)", "url": "https://github.com/authlib/authlib/security/advisories/GHSA-8m4g-j4wp-wgcg", "published_at": "2026-10-27T16:09:22Z", "updated_at": "2026-10-27T16:09:23Z", "packages": [ { "package": { "ecosystem": "pip", "name": "Authlib" }, "vulnerable_version_range": "< 1.9.1", "first_patched_version": "1.9.1", "vulnerable_functions": [] } ] }, { "id": "GHSA-x4rv-c3wx-4cr8", "summary": "Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRF", "url": "https://github.com/authlib/authlib/security/advisories/GHSA-x4rv-c3wx-4cr8", "published_at": "2026-10-27T15:39:18Z", "updated_at": "2026-10-27T15:39:20Z", "packages": [ { "package": { "ecosystem": "pip", "name": "authlib" }, "vulnerable_version_range": ">= 1.6.0, < 1.9.0", "first_patched_version": "1.9.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-c5mf-xmp2-59rc", "summary": "Authlib: ID token can disable its own nonce validation via the nonce_supported claim", "url": "https://github.com/authlib/authlib/security/advisories/GHSA-c5mf-xmp2-59rc", "published_at": "2026-10-27T15:39:13Z", "updated_at": "2026-10-27T15:39:15Z", "packages": [ { "package": { "ecosystem": "pip", "name": "authlib" }, "vulnerable_version_range": "<= 1.8.0", "first_patched_version": "1.9.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-fch4-3c6x-j4gc", "summary": "Authlib: Default JWT bearer grant accepts assertions for the wrong audience", "url": "https://github.com/authlib/authlib/security/advisories/GHSA-fch4-3c6x-j4gc", "published_at": "2026-10-27T15:39:08Z", "updated_at": "2026-10-27T15:39:10Z", "packages": [ { "package": { "ecosystem": "pip", "name": "authlib" }, "vulnerable_version_range": "< 1.9.0", "first_patched_version": "1.9.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-q686-2qmg-hqc7", "summary": "Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokens", "url": "https://github.com/authlib/authlib/security/advisories/GHSA-q686-2qmg-hqc7", "published_at": "2026-10-27T15:38:53Z", "updated_at": "2026-10-27T15:38:55Z", "packages": [ { "package": { "ecosystem": "pip", "name": "authlib" }, "vulnerable_version_range": "< 1.9.0", "first_patched_version": "1.9.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-7vr2-2fgp-9w7p", "summary": "Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys", "url": "https://github.com/authlib/authlib/security/advisories/GHSA-7vr2-2fgp-9w7p", "published_at": "2026-10-27T15:38:48Z", "updated_at": "2026-10-27T15:38:50Z", "packages": [ { "package": { "ecosystem": "pip", "name": "authlib" }, "vulnerable_version_range": ">= 1.3.1, <= 1.8.0", "first_patched_version": "1.9.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-jj7h-c3hg-m23x", "summary": "Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts", "url": "https://github.com/authlib/authlib/security/advisories/GHSA-jj7h-c3hg-m23x", "published_at": "2026-10-27T15:37:48Z", "updated_at": "2026-10-27T15:37:50Z", "packages": [ { "package": { "ecosystem": "pip", "name": "authlib" }, "vulnerable_version_range": "<= 1.7.2", "first_patched_version": "1.8.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-6v38-4h7w-rj9h", "summary": "Authlib: empty signatures validation in JWS JSON deserialization", "url": "https://github.com/authlib/authlib/security/advisories/GHSA-6v38-4h7w-rj9h", "published_at": "2026-10-27T14:50:18Z", "updated_at": "2026-10-27T14:50:19Z", "packages": [ { "package": { "ecosystem": "pip", "name": "authlib" }, "vulnerable_version_range": "<= 1.8.0", "first_patched_version": "1.9.0", "vulnerable_functions": [] } ] } ] }, { "id": "oss-rustls-rustls", "title": "rustls：TLS机密信息、ECH及压缩处理", "body": "应区分Debug输出中的机密信息、ECH被拒绝时的缓冲区、密钥交换状态及Brotli证书解压缩的分配量。仅凭本资料无法确定实际受害人数或事件数量。", "action": "更新至稳定系列0.23.46，并检查含有机密信息的Debug日志。0.24开发系列对应dev.2。", "sources": [ { "name": "GHSA-vp88-798v-h67f", "url": "https://github.com/rustls/rustls/security/advisories/GHSA-vp88-798v-h67f" }, { "name": "GHSA-w44r-93j7-qv28", "url": "https://github.com/rustls/rustls/security/advisories/GHSA-w44r-93j7-qv28" }, { "name": "GHSA-c8m5-c952-6cm4", "url": "https://github.com/rustls/rustls/security/advisories/GHSA-c8m5-c952-6cm4" }, { "name": "GHSA-h2v8-394m-p7vv", "url": "https://github.com/rustls/rustls/security/advisories/GHSA-h2v8-394m-p7vv" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T16:08:36Z 至 2026-10-27T16:08:59Z", "cve_ids": [], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-vp88-798v-h67f", "summary": "rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert", "url": "https://github.com/rustls/rustls/security/advisories/GHSA-vp88-798v-h67f", "published_at": "2026-10-27T16:08:59Z", "updated_at": "2026-10-27T16:09:02Z", "packages": [ { "package": { "ecosystem": "rust", "name": "rustls" }, "vulnerable_version_range": ">= 0.23.44, < 0.23.46", "first_patched_version": "0.23.46", "vulnerable_functions": [] }, { "package": { "ecosystem": "rust", "name": "rustls" }, "vulnerable_version_range": ">= 0.24.0-dev.1, < 0.24.0-dev.2", "first_patched_version": "0.24.0-dev.2", "vulnerable_functions": [] } ] }, { "id": "GHSA-w44r-93j7-qv28", "summary": "rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share", "url": "https://github.com/rustls/rustls/security/advisories/GHSA-w44r-93j7-qv28", "published_at": "2026-10-27T16:08:54Z", "updated_at": "2026-10-27T16:08:57Z", "packages": [ { "package": { "ecosystem": "rust", "name": "rustls" }, "vulnerable_version_range": "< 0.23.46", "first_patched_version": "0.23.46", "vulnerable_functions": [] }, { "package": { "ecosystem": "rust", "name": "rustls" }, "vulnerable_version_range": ">= 0.24.0-dev.1, < 0.24.0-dev.2", "first_patched_version": "0.24.0-dev.2", "vulnerable_functions": [] } ] }, { "id": "GHSA-c8m5-c952-6cm4", "summary": "Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs", "url": "https://github.com/rustls/rustls/security/advisories/GHSA-c8m5-c952-6cm4", "published_at": "2026-10-27T16:08:47Z", "updated_at": "2026-10-27T16:08:48Z", "packages": [ { "package": { "ecosystem": "rust", "name": "rustls" }, "vulnerable_version_range": "< 0.23.46", "first_patched_version": "0.23.46", "vulnerable_functions": [] }, { "package": { "ecosystem": "rust", "name": "rustls" }, "vulnerable_version_range": ">= 0.24.0-dev.1, < 0.24.0-dev.2", "first_patched_version": "0.24.0-dev.2", "vulnerable_functions": [] } ] }, { "id": "GHSA-h2v8-394m-p7vv", "summary": "Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.", "url": "https://github.com/rustls/rustls/security/advisories/GHSA-h2v8-394m-p7vv", "published_at": "2026-10-27T16:08:36Z", "updated_at": "2026-10-27T16:08:36Z", "packages": [ { "package": { "ecosystem": "rust", "name": "rustls" }, "vulnerable_version_range": "< 0.23.46", "first_patched_version": "0.23.46", "vulnerable_functions": [] }, { "package": { "ecosystem": "rust", "name": "rustls" }, "vulnerable_version_range": ">= 0.24.0-dev.1, < 0.24.0-dev.2", "first_patched_version": "0.24.0-dev.2", "vulnerable_functions": [] } ] } ] }, { "id": "oss-phpoffice-phpspreadsheet", "title": "PhpSpreadsheet：XXE、外部图片SSRF及资源消耗", "body": "包括绕过XML扫描器、ODS重复行、通过图片重定向绕过允许目的地限制等问题。影响范围随使用的读取器及版本系列而异。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对各项安全公告对应的修复版本，如5.10.0 / 3.10.8 / 2.4.8 / 2.1.19 / 1.30.7等。隔离不可信文档，并限制出站通信。", "sources": [ { "name": "GHSA-2phh-27fw-q4gc", "url": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-2phh-27fw-q4gc" }, { "name": "GHSA-j2w7-387v-m2rq", "url": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-j2w7-387v-m2rq" }, { "name": "GHSA-3x94-m842-937c", "url": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-3x94-m842-937c" }, { "name": "GHSA-rxj4-h86g-25gc", "url": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-rxj4-h86g-25gc" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T15:38:22Z 至 2026-10-27T15:38:39Z", "cve_ids": [ "CVE-2026-108360", "CVE-2026-108359", "CVE-2026-108358", "CVE-2026-108357" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-2phh-27fw-q4gc", "summary": "PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loading", "url": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-2phh-27fw-q4gc", "published_at": "2026-10-27T15:38:39Z", "updated_at": "2026-10-27T15:38:41Z", "packages": [ { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": ">= 4.0.0, <= 5.9.0", "first_patched_version": "5.10.0", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": ">= 3.3.0, <= 3.10.7", "first_patched_version": "3.10.8", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": ">= 2.2.0, <= 2.4.7", "first_patched_version": "2.4.8", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": ">= 2.0.0, <= 2.1.18", "first_patched_version": "2.1.19", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": "<= 1.30.6", "first_patched_version": "1.30.7", "vulnerable_functions": [] } ] }, { "id": "GHSA-j2w7-387v-m2rq", "summary": "PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS)", "url": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-j2w7-387v-m2rq", "published_at": "2026-10-27T15:38:33Z", "updated_at": "2026-10-27T15:38:35Z", "packages": [ { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": ">= 4.0.0, <= 5.9.0", "first_patched_version": "5.10.0", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": ">= 3.3.0, <= 3.10.7", "first_patched_version": "3.10.8", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": ">= 2.2.0, <= 2.4.7", "first_patched_version": "2.4.8", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": ">= 2.0.0, <= 2.1.18", "first_patched_version": "2.1.19", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": "<= 1.30.6", "first_patched_version": "1.30.7", "vulnerable_functions": [] } ] }, { "id": "GHSA-3x94-m842-937c", "summary": "PhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape Sequences Allows XXE and Denial of Service", "url": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-3x94-m842-937c", "published_at": "2026-10-27T15:38:28Z", "updated_at": "2026-10-27T15:38:30Z", "packages": [ { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": ">= 4.0.0, <= 5.9.0", "first_patched_version": "5.10.0", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": ">= 3.3.0, <= 3.10.7", "first_patched_version": "3.10.8", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": ">= 2.2.0, <= 2.4.7", "first_patched_version": "2.4.8", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": ">= 2.0.0, <= 2.1.18", "first_patched_version": "2.1.19", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": "<= 1.30.6", "first_patched_version": "1.30.7", "vulnerable_functions": [] } ] }, { "id": "GHSA-rxj4-h86g-25gc", "summary": "PhpSpreadsheet: XmlScanner Bypass via Double-Encoded unentity() TOCTOU Allows XXE and Denial of Service", "url": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-rxj4-h86g-25gc", "published_at": "2026-10-27T15:38:22Z", "updated_at": "2026-10-27T15:38:25Z", "packages": [ { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": ">= 4.0.0, <= 5.9.0", "first_patched_version": "5.10.0", "vulnerable_functions": [] }, { "package": { "ecosystem": "composer", "name": "phpoffice/phpspreadsheet" }, "vulnerable_version_range": ">= 3.3.0, <= 3.10.7", "first_patched_version": "3.10.8", "vulnerable_functions": [] } ] } ] }, { "id": "oss-klauspost-compress", "title": "compress：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-fpmh-frq8-7rj8", "url": "https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T15:38:14Z 至 2026-10-27T15:38:14Z", "cve_ids": [ "CVE-2026-116591" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-fpmh-frq8-7rj8", "summary": "compress zstd: Panic on two-block frames", "url": "https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8", "published_at": "2026-10-27T15:38:14Z", "updated_at": "2026-10-27T15:38:16Z", "packages": [ { "package": { "ecosystem": "go", "name": "github.com/klauspost/compress/zstd" }, "vulnerable_version_range": "<= 1.20.1", "first_patched_version": "1.20.2", "vulnerable_functions": [] } ] } ] }, { "id": "oss-rthalley-dnspython", "title": "dnspython：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-45c3-73f7-pv4m", "url": "https://github.com/rthalley/dnspython/security/advisories/GHSA-45c3-73f7-pv4m" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T15:37:37Z 至 2026-10-27T15:37:37Z", "cve_ids": [ "CVE-2026-114605" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-45c3-73f7-pv4m", "summary": "dnspython dns.name.from_wire_parser() excessive CPU use", "url": "https://github.com/rthalley/dnspython/security/advisories/GHSA-45c3-73f7-pv4m", "published_at": "2026-10-27T15:37:37Z", "updated_at": "2026-10-27T15:37:39Z", "packages": [ { "package": { "ecosystem": "pip", "name": "dnspython" }, "vulnerable_version_range": "< 2.9.0", "first_patched_version": "2.9.0", "vulnerable_functions": [] } ] } ] }, { "id": "oss-datadog-dd-trace-py", "title": "dd-trace-py：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了2项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-3633-r77q-h3v3", "url": "https://github.com/DataDog/dd-trace-py/security/advisories/GHSA-3633-r77q-h3v3" }, { "name": "GHSA-p3m5-h5v9-vqj6", "url": "https://github.com/DataDog/dd-trace-py/security/advisories/GHSA-p3m5-h5v9-vqj6" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T15:37:24Z 至 2026-10-27T15:37:31Z", "cve_ids": [ "CVE-2026-116588", "CVE-2026-116589" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-3633-r77q-h3v3", "summary": "Datadog dd-trace-py: ReDoS in URL query string obfuscation", "url": "https://github.com/DataDog/dd-trace-py/security/advisories/GHSA-3633-r77q-h3v3", "published_at": "2026-10-27T15:37:31Z", "updated_at": "2026-10-27T15:37:32Z", "packages": [ { "package": { "ecosystem": "pip", "name": "ddtrace" }, "vulnerable_version_range": ">= 1.5.0, < 3.19.9", "first_patched_version": "3.19.9", "vulnerable_functions": [] }, { "package": { "ecosystem": "pip", "name": "ddtrace" }, "vulnerable_version_range": ">= 4.0.0, < 4.15.6", "first_patched_version": "4.15.6", "vulnerable_functions": [] } ] }, { "id": "GHSA-p3m5-h5v9-vqj6", "summary": "Datadog dd-trace-py: IAST instrumentation can lead to application DOS", "url": "https://github.com/DataDog/dd-trace-py/security/advisories/GHSA-p3m5-h5v9-vqj6", "published_at": "2026-10-27T15:37:24Z", "updated_at": "2026-10-27T15:37:26Z", "packages": [ { "package": { "ecosystem": "pip", "name": "ddtrace" }, "vulnerable_version_range": ">= 3.13.0, < 4.15.5", "first_patched_version": "4.15.5", "vulnerable_functions": [] } ] } ] }, { "id": "oss-mongodb-mongo-python-driver", "title": "mongo-python-driver：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-98qm-wvgf-w4cf", "url": "https://github.com/mongodb/mongo-python-driver/security/advisories/GHSA-98qm-wvgf-w4cf" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T15:36:35Z 至 2026-10-27T15:36:35Z", "cve_ids": [ "CVE-2026-106435" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-98qm-wvgf-w4cf", "summary": "MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex element", "url": "https://github.com/mongodb/mongo-python-driver/security/advisories/GHSA-98qm-wvgf-w4cf", "published_at": "2026-10-27T15:36:35Z", "updated_at": "2026-10-27T15:36:37Z", "packages": [ { "package": { "ecosystem": "pip", "name": "pymongo" }, "vulnerable_version_range": ">= 3.9.0, <= 4.18.2", "first_patched_version": "4.18.3", "vulnerable_functions": [] } ] } ] }, { "id": "oss-vllm-project-vllm", "title": "vLLM：模型revision指定及P2P卸载", "body": "应区分通过请求中的mm_processor_kwargs.code_revision触发的执行问题，与特定P2P次级存储层的socket耗尽问题。并非所有配置都具备相同条件。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核实各项安全公告的功能条件。执行问题在0.31.0中修复，P2P问题在0.32.0中修复。限制模型获取及API访问。", "sources": [ { "name": "GHSA-h3rc-6mm3-gc2m", "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-h3rc-6mm3-gc2m" }, { "name": "GHSA-frvg-qw88-hww9", "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-frvg-qw88-hww9" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T14:45:53Z 至 2026-10-27T15:36:17Z", "cve_ids": [ "CVE-2026-114053", "CVE-2026-94624" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-h3rc-6mm3-gc2m", "summary": "vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution", "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-h3rc-6mm3-gc2m", "published_at": "2026-10-27T15:36:17Z", "updated_at": "2026-10-27T15:36:19Z", "packages": [ { "package": { "ecosystem": "pip", "name": "vllm" }, "vulnerable_version_range": ">= 0.7.3, < 0.31.0", "first_patched_version": "0.31.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-frvg-qw88-hww9", "summary": "vllm p2p never connected zmq_exhaustion", "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-frvg-qw88-hww9", "published_at": "2026-10-27T14:45:53Z", "updated_at": "2026-10-27T14:45:54Z", "packages": [ { "package": { "ecosystem": "pip", "name": "vllm" }, "vulnerable_version_range": "< 0.32.0", "first_patched_version": "0.32.0", "vulnerable_functions": [] } ] } ] }, { "id": "oss-strands-agents-harness-sdk", "title": "harness-sdk：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了2项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-3w55-933p-8pv5", "url": "https://github.com/strands-agents/harness-sdk/security/advisories/GHSA-3w55-933p-8pv5" }, { "name": "GHSA-763v-5pjm-fx36", "url": "https://github.com/strands-agents/harness-sdk/security/advisories/GHSA-763v-5pjm-fx36" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T15:34:28Z 至 2026-10-27T15:34:33Z", "cve_ids": [], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-3w55-933p-8pv5", "summary": "Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage", "url": "https://github.com/strands-agents/harness-sdk/security/advisories/GHSA-3w55-933p-8pv5", "published_at": "2026-10-27T15:34:33Z", "updated_at": "2026-10-27T15:34:33Z", "packages": [ { "package": { "ecosystem": "pip", "name": "strands-agents" }, "vulnerable_version_range": "< 1.48.0", "first_patched_version": "1.48.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-763v-5pjm-fx36", "summary": "Strands Agents: Default FileSessionManager storage is world-readable on shared systems", "url": "https://github.com/strands-agents/harness-sdk/security/advisories/GHSA-763v-5pjm-fx36", "published_at": "2026-10-27T15:34:28Z", "updated_at": "2026-10-27T15:34:28Z", "packages": [ { "package": { "ecosystem": "pip", "name": "strands-agents" }, "vulnerable_version_range": "< 1.48.0", "first_patched_version": "1.48.0", "vulnerable_functions": [] } ] } ] }, { "id": "oss-xerial-snappy-java", "title": "snappy-java：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了3项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-gwq9-9ffj-mvrv", "url": "https://github.com/xerial/snappy-java/security/advisories/GHSA-gwq9-9ffj-mvrv" }, { "name": "GHSA-xqrx-qh46-34m7", "url": "https://github.com/xerial/snappy-java/security/advisories/GHSA-xqrx-qh46-34m7" }, { "name": "GHSA-q233-g92q-qxp6", "url": "https://github.com/xerial/snappy-java/security/advisories/GHSA-q233-g92q-qxp6" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T15:33:22Z 至 2026-10-27T15:33:42Z", "cve_ids": [ "CVE-2026-93451", "CVE-2026-116590", "CVE-2026-108106" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-gwq9-9ffj-mvrv", "summary": "snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods", "url": "https://github.com/xerial/snappy-java/security/advisories/GHSA-gwq9-9ffj-mvrv", "published_at": "2026-10-27T15:33:42Z", "updated_at": "2026-10-27T15:33:43Z", "packages": [ { "package": { "ecosystem": "maven", "name": "org.xerial.snappy:snappy-java" }, "vulnerable_version_range": "<= 1.1.10.8", "first_patched_version": "1.1.10.9", "vulnerable_functions": [] } ] }, { "id": "GHSA-xqrx-qh46-34m7", "summary": "snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite", "url": "https://github.com/xerial/snappy-java/security/advisories/GHSA-xqrx-qh46-34m7", "published_at": "2026-10-27T15:33:30Z", "updated_at": "2026-10-27T15:33:30Z", "packages": [ { "package": { "ecosystem": "maven", "name": "org.xerial.snappy:snappy-java" }, "vulnerable_version_range": "<= 1.1.10.8", "first_patched_version": "1.1.10.9", "vulnerable_functions": [] } ] }, { "id": "GHSA-q233-g92q-qxp6", "summary": "snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha", "url": "https://github.com/xerial/snappy-java/security/advisories/GHSA-q233-g92q-qxp6", "published_at": "2026-10-27T15:33:22Z", "updated_at": "2026-10-27T15:33:24Z", "packages": [ { "package": { "ecosystem": "maven", "name": "org.xerial.snappy:snappy-java" }, "vulnerable_version_range": "<= 1.1.10.8", "first_patched_version": "1.1.10.9", "vulnerable_functions": [] } ] } ] }, { "id": "oss-stevereiner-flexible-graphrag", "title": "flexible-graphrag：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-vqrg-773h-4wxc", "url": "https://github.com/stevereiner/flexible-graphrag/security/advisories/GHSA-vqrg-773h-4wxc" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T15:32:45Z 至 2026-10-27T15:32:45Z", "cve_ids": [ "CVE-2026-114510" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-vqrg-773h-4wxc", "summary": "Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content", "url": "https://github.com/stevereiner/flexible-graphrag/security/advisories/GHSA-vqrg-773h-4wxc", "published_at": "2026-10-27T15:32:45Z", "updated_at": "2026-10-27T15:32:45Z", "packages": [ { "package": { "ecosystem": "pip", "name": "flexible-graphrag" }, "vulnerable_version_range": ">= 0.6.0, < 0.8.2", "first_patched_version": "0.8.2", "vulnerable_functions": [] } ] } ] }, { "id": "oss-berriai-litellm", "title": "LiteLLM：权限提升、文件读取及XSS", "body": "本次3项安全公告公开的是产品漏洞，应与分发渠道遭入侵事件分开处理。从internal_user提升至proxy_admin的问题还取决于旧版本系列的experimental配置。仅凭本资料无法确定实际受害人数或事件数量。", "action": "针对权限提升问题，核实1.100.4 / 1.101.3 / 1.102.2 / 1.103.1 / 1.104.0rc2等对应版本系列。临时措施EXPERIMENTAL_UI_LOGIN=false也会禁用CLI SSO等功能。", "sources": [ { "name": "GHSA-g5ff-637f-6q2m", "url": "https://github.com/BerriAI/litellm/security/advisories/GHSA-g5ff-637f-6q2m" }, { "name": "GHSA-hhww-mrg2-969h", "url": "https://github.com/BerriAI/litellm/security/advisories/GHSA-hhww-mrg2-969h" }, { "name": "GHSA-7hp6-4w63-5g45", "url": "https://github.com/BerriAI/litellm/security/advisories/GHSA-7hp6-4w63-5g45" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T15:04:14Z 至 2026-10-27T15:32:36Z", "cve_ids": [ "CVE-2026-114612" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-g5ff-637f-6q2m", "summary": "LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`", "url": "https://github.com/BerriAI/litellm/security/advisories/GHSA-g5ff-637f-6q2m", "published_at": "2026-10-27T15:32:36Z", "updated_at": "2026-10-27T15:32:37Z", "packages": [ { "package": { "ecosystem": "pip", "name": "litellm" }, "vulnerable_version_range": "< 1.95.0", "first_patched_version": "1.95.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-hhww-mrg2-969h", "summary": "LiteLLM vulnerable to reflected XSS in /sso/debug/callback", "url": "https://github.com/BerriAI/litellm/security/advisories/GHSA-hhww-mrg2-969h", "published_at": "2026-10-27T15:31:56Z", "updated_at": "2026-10-27T15:31:58Z", "packages": [ { "package": { "ecosystem": "pip", "name": "litellm" }, "vulnerable_version_range": ">= 1.65.5, < 1.85.0", "first_patched_version": "1.85.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-7hp6-4w63-5g45", "summary": "LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key", "url": "https://github.com/BerriAI/litellm/security/advisories/GHSA-7hp6-4w63-5g45", "published_at": "2026-10-27T15:04:14Z", "updated_at": "2026-10-27T15:04:15Z", "packages": [ { "package": { "ecosystem": "pip", "name": "litellm" }, "vulnerable_version_range": ">= 1.91.0, < 1.100.4", "first_patched_version": "1.100.4", "vulnerable_functions": [] }, { "package": { "ecosystem": "pip", "name": "litellm" }, "vulnerable_version_range": ">= 1.101.0, < 1.101.3", "first_patched_version": "1.101.3", "vulnerable_functions": [] }, { "package": { "ecosystem": "pip", "name": "litellm" }, "vulnerable_version_range": ">= 1.102.0, < 1.102.2", "first_patched_version": "1.102.2", "vulnerable_functions": [] }, { "package": { "ecosystem": "pip", "name": "litellm" }, "vulnerable_version_range": ">= 1.103.0, < 1.103.1", "first_patched_version": "1.103.1", "vulnerable_functions": [] }, { "package": { "ecosystem": "pip", "name": "litellm" }, "vulnerable_version_range": ">= 1.104.0rc1, < 1.104.0rc2", "first_patched_version": "1.104.0rc2", "vulnerable_functions": [] } ] } ] }, { "id": "oss-better-auth-better-auth", "title": "Better Auth：OAuth state及代理的账户边界", "body": "包括OAuth Proxy、将state用于MagicLink、数据库适配器的速率限制，以及任意设备授权时显示信息不足等问题。设备问题需要满足主动启用相关功能、用户批准等条件。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核实better-auth 1.7.7及所使用的适配器。设备授权界面应依据服务器验证后的内容，显示发起请求的客户端及权限。", "sources": [ { "name": "GHSA-44jh-23m7-hpcf", "url": "https://github.com/better-auth/better-auth/security/advisories/GHSA-44jh-23m7-hpcf" }, { "name": "GHSA-r4xp-prcw-77qf", "url": "https://github.com/better-auth/better-auth/security/advisories/GHSA-r4xp-prcw-77qf" }, { "name": "GHSA-965c-763c-88jm", "url": "https://github.com/better-auth/better-auth/security/advisories/GHSA-965c-763c-88jm" }, { "name": "GHSA-q84f-53jg-9ppm", "url": "https://github.com/better-auth/better-auth/security/advisories/GHSA-q84f-53jg-9ppm" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T14:49:53Z 至 2026-10-27T15:32:25Z", "cve_ids": [ "CVE-2026-114607" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-44jh-23m7-hpcf", "summary": "@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL", "url": "https://github.com/better-auth/better-auth/security/advisories/GHSA-44jh-23m7-hpcf", "published_at": "2026-10-27T15:32:25Z", "updated_at": "2026-10-27T15:32:27Z", "packages": [ { "package": { "ecosystem": "npm", "name": "@better-auth/drizzle-adapter" }, "vulnerable_version_range": ">= 1.6.17, < 1.7.7", "first_patched_version": "1.7.7", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "@better-auth/kysely-adapter" }, "vulnerable_version_range": ">= 1.6.17, < 1.7.0", "first_patched_version": "1.7.0", "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "better-auth" }, "vulnerable_version_range": ">= 1.6.17, < 1.7.7", "first_patched_version": "1.7.7", "vulnerable_functions": [] } ] }, { "id": "GHSA-r4xp-prcw-77qf", "summary": "better-auth: OAuth Proxy lets an attacker sign in as another user", "url": "https://github.com/better-auth/better-auth/security/advisories/GHSA-r4xp-prcw-77qf", "published_at": "2026-10-27T15:32:16Z", "updated_at": "2026-10-27T15:32:17Z", "packages": [ { "package": { "ecosystem": "npm", "name": "better-auth" }, "vulnerable_version_range": ">= 1.5.0-beta.12, < 1.7.7", "first_patched_version": "1.7.7", "vulnerable_functions": [] } ] }, { "id": "GHSA-965c-763c-88jm", "summary": "better-auth: OAuth state can be used as a Magic Link to sign in as another user", "url": "https://github.com/better-auth/better-auth/security/advisories/GHSA-965c-763c-88jm", "published_at": "2026-10-27T15:32:05Z", "updated_at": "2026-10-27T15:32:09Z", "packages": [ { "package": { "ecosystem": "npm", "name": "better-auth" }, "vulnerable_version_range": ">= 1.4.0-beta.18, < 1.7.7", "first_patched_version": "1.7.7", "vulnerable_functions": [] } ] }, { "id": "GHSA-q84f-53jg-9ppm", "summary": "better-auth: Device login approval does not show the requesting client or permissions", "url": "https://github.com/better-auth/better-auth/security/advisories/GHSA-q84f-53jg-9ppm", "published_at": "2026-10-27T14:49:53Z", "updated_at": "2026-10-27T14:49:54Z", "packages": [ { "package": { "ecosystem": "npm", "name": "better-auth" }, "vulnerable_version_range": ">= 1.3.8-beta.3, < 1.7.0-rc.3", "first_patched_version": "1.7.0-rc.3", "vulnerable_functions": [] } ] } ] }, { "id": "oss-gitpython-developers-gitpython", "title": "GitPython：不可信仓库、refspec及submodule的边界", "body": "共6项安全公告，包括通过分支名读取文件、submodule符号链接、pull的不安全选项及环境变量暴露等问题。利用条件会因常规Git传输限制等因素而异。仅凭本资料无法确定实际受害人数或事件数量。", "action": "更新至3.2.0。不要在带有机密信息的CI环境中处理不可信仓库。如确有需要，应进行隔离，并检查已暴露的日志及凭据。", "sources": [ { "name": "GHSA-23mf-xhv8-69c2", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2" }, { "name": "GHSA-gq48-pqfc-9p58", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-gq48-pqfc-9p58" }, { "name": "GHSA-f9j4-qggq-h239", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-f9j4-qggq-h239" }, { "name": "GHSA-w8jc-g24h-crhw", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw" }, { "name": "GHSA-fx3j-rwgx-fr94", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fx3j-rwgx-fr94" }, { "name": "GHSA-m64x-33q8-m5h7", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T15:26:24Z 至 2026-10-27T15:28:03Z", "cve_ids": [], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-23mf-xhv8-69c2", "summary": "GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2", "published_at": "2026-10-27T15:28:03Z", "updated_at": "2026-10-27T15:28:31Z", "packages": [ { "package": { "ecosystem": "pip", "name": "GitPython" }, "vulnerable_version_range": "<= 3.1.62", "first_patched_version": "3.2.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-gq48-pqfc-9p58", "summary": "GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-gq48-pqfc-9p58", "published_at": "2026-10-27T15:26:57Z", "updated_at": "2026-10-27T15:28:29Z", "packages": [ { "package": { "ecosystem": "pip", "name": "GitPython" }, "vulnerable_version_range": "< 3.2.0", "first_patched_version": "3.2.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-f9j4-qggq-h239", "summary": "GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command execution", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-f9j4-qggq-h239", "published_at": "2026-10-27T15:26:50Z", "updated_at": "2026-10-27T15:28:29Z", "packages": [ { "package": { "ecosystem": "pip", "name": "GitPython" }, "vulnerable_version_range": ">= 3.1.30, < 3.2.0", "first_patched_version": "3.2.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-w8jc-g24h-crhw", "summary": "GitPython command wrappers omit unsafe protocol and option checks", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw", "published_at": "2026-10-27T15:26:43Z", "updated_at": "2026-10-27T15:26:45Z", "packages": [ { "package": { "ecosystem": "pip", "name": "GitPython" }, "vulnerable_version_range": "<= 3.1.62", "first_patched_version": "3.2.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-fx3j-rwgx-fr94", "summary": "GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fx3j-rwgx-fr94", "published_at": "2026-10-27T15:26:32Z", "updated_at": "2026-10-27T15:26:33Z", "packages": [ { "package": { "ecosystem": "pip", "name": "GitPython" }, "vulnerable_version_range": "<= 3.1.62", "first_patched_version": "3.2.0", "vulnerable_functions": [] } ] }, { "id": "GHSA-m64x-33q8-m5h7", "summary": "GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7", "published_at": "2026-10-27T15:26:24Z", "updated_at": "2026-10-27T15:26:25Z", "packages": [ { "package": { "ecosystem": "pip", "name": "GitPython" }, "vulnerable_version_range": "<= 3.1.62", "first_patched_version": "3.2.0", "vulnerable_functions": [] } ] } ] }, { "id": "oss-nodemailer-nodemailer", "title": "nodemailer：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了3项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-4ffr-jq9g-5ffx", "url": "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4ffr-jq9g-5ffx" }, { "name": "GHSA-g73g-hqqh-jr95", "url": "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-g73g-hqqh-jr95" }, { "name": "GHSA-4g23-2xm8-66gc", "url": "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4g23-2xm8-66gc" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T15:04:33Z 至 2026-10-27T15:04:39Z", "cve_ids": [], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-4ffr-jq9g-5ffx", "summary": "Nodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of service", "url": "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4ffr-jq9g-5ffx", "published_at": "2026-10-27T15:04:39Z", "updated_at": "2026-10-27T15:04:41Z", "packages": [ { "package": { "ecosystem": "npm", "name": "nodemailer" }, "vulnerable_version_range": ">= 3.0.0, <= 10.0.12", "first_patched_version": "10.0.13", "vulnerable_functions": [] } ] }, { "id": "GHSA-g73g-hqqh-jr95", "summary": "Nodemailer: RFC 5322 comment inside an angle-bracket address is never stripped", "url": "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-g73g-hqqh-jr95", "published_at": "2026-10-27T15:04:36Z", "updated_at": "2026-10-27T15:04:36Z", "packages": [ { "package": { "ecosystem": "npm", "name": "nodemailer" }, "vulnerable_version_range": ">= 3.0.0, <= 10.0.12", "first_patched_version": "10.0.13", "vulnerable_functions": [] } ] }, { "id": "GHSA-4g23-2xm8-66gc", "summary": "Nodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service", "url": "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4g23-2xm8-66gc", "published_at": "2026-10-27T15:04:33Z", "updated_at": "2026-10-27T15:04:35Z", "packages": [ { "package": { "ecosystem": "npm", "name": "nodemailer" }, "vulnerable_version_range": ">= 3.0.0, <= 10.0.9", "first_patched_version": "10.0.10", "vulnerable_functions": [] } ] } ] }, { "id": "oss-msgpack-msgpack-python", "title": "msgpack-python：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-j586-36cw-2gc2", "url": "https://github.com/msgpack/msgpack-python/security/advisories/GHSA-j586-36cw-2gc2" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T15:04:07Z 至 2026-10-27T15:04:07Z", "cve_ids": [ "CVE-2026-114613" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-j586-36cw-2gc2", "summary": "MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure", "url": "https://github.com/msgpack/msgpack-python/security/advisories/GHSA-j586-36cw-2gc2", "published_at": "2026-10-27T15:04:07Z", "updated_at": "2026-10-27T15:04:09Z", "packages": [ { "package": { "ecosystem": "pip", "name": "msgpack" }, "vulnerable_version_range": "< 1.2.3", "first_patched_version": "1.2.3", "vulnerable_functions": [] } ] } ] }, { "id": "oss-nltk-nltk", "title": "nltk：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-j456-xh4h-cpf2", "url": "https://github.com/nltk/nltk/security/advisories/GHSA-j456-xh4h-cpf2" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T14:50:30Z 至 2026-10-27T14:50:30Z", "cve_ids": [], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-j456-xh4h-cpf2", "summary": "NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment", "url": "https://github.com/nltk/nltk/security/advisories/GHSA-j456-xh4h-cpf2", "published_at": "2026-10-27T14:50:30Z", "updated_at": "2026-10-27T14:50:31Z", "packages": [ { "package": { "ecosystem": "pip", "name": "nltk" }, "vulnerable_version_range": "<= 3.10.3", "first_patched_version": "3.10.4", "vulnerable_functions": [] } ] } ] }, { "id": "oss-pylint-dev-pylint", "title": "pylint：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-22qq-2fwx-7p67", "url": "https://github.com/pylint-dev/pylint/security/advisories/GHSA-22qq-2fwx-7p67" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T14:46:51Z 至 2026-10-27T14:46:51Z", "cve_ids": [ "CVE-2026-114608" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-22qq-2fwx-7p67", "summary": "Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME", "url": "https://github.com/pylint-dev/pylint/security/advisories/GHSA-22qq-2fwx-7p67", "published_at": "2026-10-27T14:46:51Z", "updated_at": "2026-10-27T14:46:51Z", "packages": [ { "package": { "ecosystem": "pip", "name": "pylint" }, "vulnerable_version_range": "< 4.0.9", "first_patched_version": "4.0.9", "vulnerable_functions": [] } ] } ] }, { "id": "oss-vercel-next-js", "title": "Satori：生成SVG时的转义缺陷", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-wx4j-mvgx-mqwp", "url": "https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T14:46:43Z 至 2026-10-27T14:46:43Z", "cve_ids": [ "CVE-2026-94545" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-wx4j-mvgx-mqwp", "summary": "Satori-generated SVG has improper escaping", "url": "https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j", "published_at": "2026-10-27T14:46:43Z", "updated_at": "2026-10-27T14:46:44Z", "packages": [ { "package": { "ecosystem": "npm", "name": "satori" }, "vulnerable_version_range": ">= 0.0.27, < 0.33.5", "first_patched_version": "0.33.5", "vulnerable_functions": [] } ] } ] }, { "id": "oss-danielgatis-rembg", "title": "rembg：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-qr6x-7v33-6qmg", "url": "https://github.com/danielgatis/rembg/security/advisories/GHSA-qr6x-7v33-6qmg" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T14:45:36Z 至 2026-10-27T14:45:36Z", "cve_ids": [ "CVE-2026-115924" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-qr6x-7v33-6qmg", "summary": "Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs", "url": "https://github.com/danielgatis/rembg/security/advisories/GHSA-qr6x-7v33-6qmg", "published_at": "2026-10-27T14:45:36Z", "updated_at": "2026-10-27T14:45:38Z", "packages": [ { "package": { "ecosystem": "pip", "name": "rembg" }, "vulnerable_version_range": "< 2.0.82", "first_patched_version": "2.0.82", "vulnerable_functions": [] } ] } ] }, { "id": "oss-twisted-twisted", "title": "twisted：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-jj36-9pvh-vj5r", "url": "https://github.com/twisted/twisted/security/advisories/GHSA-jj36-9pvh-vj5r" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T14:45:29Z 至 2026-10-27T14:45:29Z", "cve_ids": [ "CVE-2026-83813" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-jj36-9pvh-vj5r", "summary": "Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation", "url": "https://github.com/twisted/twisted/security/advisories/GHSA-jj36-9pvh-vj5r", "published_at": "2026-10-27T14:45:29Z", "updated_at": "2026-10-27T14:45:30Z", "packages": [ { "package": { "ecosystem": "pip", "name": "Twisted" }, "vulnerable_version_range": "<= 26.4.0", "first_patched_version": "26.10.0rc1", "vulnerable_functions": [] } ] } ] }, { "id": "oss-tryghost-ghost", "title": "Ghost：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-qrh6-cwg3-343x", "url": "https://github.com/TryGhost/Ghost/security/advisories/GHSA-qrh6-cwg3-343x" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T14:44:19Z 至 2026-10-27T14:44:19Z", "cve_ids": [ "CVE-2026-103288" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-qrh6-cwg3-343x", "summary": "Ghost: Authorization Bypass in Comment Like Feature", "url": "https://github.com/TryGhost/Ghost/security/advisories/GHSA-qrh6-cwg3-343x", "published_at": "2026-10-27T14:44:19Z", "updated_at": "2026-10-27T14:44:20Z", "packages": [ { "package": { "ecosystem": "npm", "name": "ghost" }, "vulnerable_version_range": ">= 5.9.0, < 6.44.1", "first_patched_version": "6.44.1", "vulnerable_functions": [] } ] } ] }, { "id": "oss-siyuan-note-siyuan", "title": "siyuan：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-c8r8-95hg-mp34", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-c8r8-95hg-mp34" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T14:43:57Z 至 2026-10-27T14:43:57Z", "cve_ids": [ "CVE-2026-60083" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-c8r8-95hg-mp34", "summary": "SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files", "url": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-c8r8-95hg-mp34", "published_at": "2026-10-27T14:43:57Z", "updated_at": "2026-10-27T14:43:58Z", "packages": [ { "package": { "ecosystem": "go", "name": "github.com/siyuan-note/siyuan/kernel" }, "vulnerable_version_range": "< 0.0.0-20260808051406-3542530c505f", "first_patched_version": "0.0.0-20260808051406-3542530c505f", "vulnerable_functions": [] } ] } ] }, { "id": "oss-py-pdf-fpdf2", "title": "fpdf2：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了2项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-wqw6-wpr3-45rh", "url": "https://github.com/py-pdf/fpdf2/security/advisories/GHSA-wqw6-wpr3-45rh" }, { "name": "GHSA-rw7v-4hrq-x6r9", "url": "https://github.com/py-pdf/fpdf2/security/advisories/GHSA-rw7v-4hrq-x6r9" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T14:43:16Z 至 2026-10-27T14:43:19Z", "cve_ids": [ "CVE-2026-114610", "CVE-2026-114609" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-wqw6-wpr3-45rh", "summary": "fpdf2: Exponential SVG '' expansion causes CPU and memory exhaustion in 'FPDF.image()'", "url": "https://github.com/py-pdf/fpdf2/security/advisories/GHSA-wqw6-wpr3-45rh", "published_at": "2026-10-27T14:43:19Z", "updated_at": "2026-10-27T14:43:20Z", "packages": [ { "package": { "ecosystem": "pip", "name": "fpdf2" }, "vulnerable_version_range": ">= 2.5.0, < 2.8.8", "first_patched_version": "2.8.8", "vulnerable_functions": [] } ] }, { "id": "GHSA-rw7v-4hrq-x6r9", "summary": "fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content", "url": "https://github.com/py-pdf/fpdf2/security/advisories/GHSA-rw7v-4hrq-x6r9", "published_at": "2026-10-27T14:43:16Z", "updated_at": "2026-10-27T14:43:17Z", "packages": [ { "package": { "ecosystem": "pip", "name": "fpdf2" }, "vulnerable_version_range": "<= 2.8.7", "first_patched_version": "2.8.8", "vulnerable_functions": [] } ] } ] }, { "id": "oss-google-guava", "title": "guava：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-xxph-c9ww-hj94", "url": "https://github.com/google/guava/security/advisories/GHSA-xxph-c9ww-hj94" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T14:27:53Z 至 2026-10-27T14:27:53Z", "cve_ids": [ "CVE-2026-102554" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-xxph-c9ww-hj94", "summary": "Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation", "url": "https://github.com/google/guava/security/advisories/GHSA-xxph-c9ww-hj94", "published_at": "2026-10-27T14:27:53Z", "updated_at": "2026-10-27T14:27:55Z", "packages": [ { "package": { "ecosystem": "maven", "name": "com.google.guava:guava" }, "vulnerable_version_range": ">= 4.0, <= 33.7.1", "first_patched_version": "33.7.2", "vulnerable_functions": [] } ] } ] }, { "id": "oss-agno-agi-agno", "title": "agno：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-m4w4-3r8h-jw98", "url": "https://github.com/agno-agi/agno/security/advisories/GHSA-m4w4-3r8h-jw98" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T13:30:41Z 至 2026-10-27T13:30:41Z", "cve_ids": [ "CVE-2026-35002" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-m4w4-3r8h-jw98", "summary": "Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`", "url": "https://github.com/agno-agi/agno/security/advisories/GHSA-m4w4-3r8h-jw98", "published_at": "2026-10-27T13:30:41Z", "updated_at": "2026-10-27T13:30:42Z", "packages": [ { "package": { "ecosystem": "pip", "name": "agno" }, "vulnerable_version_range": "< 2.3.24", "first_patched_version": "2.3.24", "vulnerable_functions": [] } ] } ] }, { "id": "oss-oauthlib-oauthlib", "title": "oauthlib：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-3jp2-3mrg-2vxc", "url": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-3jp2-3mrg-2vxc" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T13:30:17Z 至 2026-10-27T13:30:17Z", "cve_ids": [ "CVE-2026-49272" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-3jp2-3mrg-2vxc", "summary": "OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow", "url": "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-3jp2-3mrg-2vxc", "published_at": "2026-10-27T13:30:17Z", "updated_at": "2026-10-27T13:30:19Z", "packages": [ { "package": { "ecosystem": "pip", "name": "oauthlib" }, "vulnerable_version_range": ">= 3.3.0, < 4.0.0", "first_patched_version": "4.0.0", "vulnerable_functions": [] } ] } ] }, { "id": "oss-project-monai-monai", "title": "MONAI：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-6hp3-vr39-rqw8", "url": "https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-6hp3-vr39-rqw8" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T13:30:10Z 至 2026-10-27T13:30:10Z", "cve_ids": [ "CVE-2026-48705" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-6hp3-vr39-rqw8", "summary": "MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)", "url": "https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-6hp3-vr39-rqw8", "published_at": "2026-10-27T13:30:10Z", "updated_at": "2026-10-27T13:30:11Z", "packages": [ { "package": { "ecosystem": "pip", "name": "monai" }, "vulnerable_version_range": "< 1.6.1", "first_patched_version": "1.6.1", "vulnerable_functions": [] } ] } ] }, { "id": "oss-dcmjs-org-dcmjs", "title": "dcmjs：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-px68-xx5g-48q5", "url": "https://github.com/dcmjs-org/dcmjs/security/advisories/GHSA-px68-xx5g-48q5" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T13:29:57Z 至 2026-10-27T13:29:57Z", "cve_ids": [ "CVE-2026-46350" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-px68-xx5g-48q5", "summary": "dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS", "url": "https://github.com/dcmjs-org/dcmjs/security/advisories/GHSA-px68-xx5g-48q5", "published_at": "2026-10-27T13:29:57Z", "updated_at": "2026-10-27T13:29:59Z", "packages": [ { "package": { "ecosystem": "npm", "name": "dcmjs" }, "vulnerable_version_range": "< 0.52.0", "first_patched_version": "0.52.0", "vulnerable_functions": [] } ] } ] }, { "id": "oss-wailsapp-wails", "title": "wails：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-47hv-j4px-h3c9", "url": "https://github.com/wailsapp/wails/security/advisories/GHSA-47hv-j4px-h3c9" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T13:29:47Z 至 2026-10-27T13:29:47Z", "cve_ids": [ "CVE-2026-34157" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-47hv-j4px-h3c9", "summary": "Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins", "url": "https://github.com/wailsapp/wails/security/advisories/GHSA-47hv-j4px-h3c9", "published_at": "2026-10-27T13:29:47Z", "updated_at": "2026-10-27T13:29:48Z", "packages": [ { "package": { "ecosystem": "go", "name": "github.com/wailsapp/wails/v2" }, "vulnerable_version_range": ">= 2.0.0, < 2.13.0", "first_patched_version": "2.13.0", "vulnerable_functions": [] } ] } ] }, { "id": "oss-dolibarr-dolibarr", "title": "dolibarr：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-v5fq-cf5m-vwv7", "url": "https://github.com/Dolibarr/dolibarr/security/advisories/GHSA-v5fq-cf5m-vwv7" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T13:29:25Z 至 2026-10-27T13:29:25Z", "cve_ids": [ "CVE-2026-33944" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-v5fq-cf5m-vwv7", "summary": "Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter", "url": "https://github.com/Dolibarr/dolibarr/security/advisories/GHSA-v5fq-cf5m-vwv7", "published_at": "2026-10-27T13:29:25Z", "updated_at": "2026-10-27T13:29:27Z", "packages": [ { "package": { "ecosystem": "composer", "name": "dolibarr/dolibarr" }, "vulnerable_version_range": "<= 23.0.0", "first_patched_version": null, "vulnerable_functions": [] } ] } ] }, { "id": "oss-ajenti-ajenti", "title": "ajenti：核实已公开的安全公告及修复范围", "body": "在本次GHSA公开时间窗口内确认了1项安全公告。涉及的功能、输入、权限等利用条件请参阅各开发方资料。登记时间并非首次发布版本的日期或实际攻击的时间。仅凭本资料无法确定实际受害人数或事件数量。", "action": "核对下方各项安全公告的影响范围及修复版本。对于未列出修复版本的系列，不应认定已经修复，应核实开发方的迁移方案及临时措施。", "sources": [ { "name": "GHSA-vcw3-r3fx-j444", "url": "https://github.com/ajenti/ajenti/security/advisories/GHSA-vcw3-r3fx-j444" } ], "kind": "delta", "time": "GHSA公开时间：2026-10-27T13:27:58Z 至 2026-10-27T13:27:58Z", "cve_ids": [ "CVE-2026-27975" ], "certainty": "confirmed-publication", "date": "2026-10-28", "advisories": [ { "id": "GHSA-vcw3-r3fx-j444", "summary": "Ajenti has potential Remote Code Execution", "url": "https://github.com/ajenti/ajenti/security/advisories/GHSA-vcw3-r3fx-j444", "published_at": "2026-10-27T13:27:58Z", "updated_at": "2026-10-27T13:28:00Z", "packages": [ { "package": { "ecosystem": "pip", "name": "aj" }, "vulnerable_version_range": "< 2.2.13", "first_patched_version": "2.2.13", "vulnerable_functions": [] } ] } ] }, { "id": "connectwise-validation", "title": "ConnectWise：分阶段恢复的准备已完成，仍在等待第三方验证", "body": "27日14:30 UTC的更新说明，分阶段恢复的准备已完成，正在等待必需的第三方验证。这并非宣布已开始提供恢复访问或已全面恢复。Axcient Legacy Portal于22日恢复属于另一起PHP应对事件。", "action": "继续禁用相关连接，等待个别恢复通知。不要将“未发现加密备份归档遭入侵迹象”的说明，泛化为各Microsoft 365租户均未遭入侵。", "sources": [ { "name": "ConnectWise公式", "url": "https://www.connectwise.com/company/trust/advisories" } ], "kind": "delta", "time": "10/27 23:30 JST 更新", "cve_ids": [], "certainty": "confirmed-publication", "date": "2026-10-28" }, { "id": "tailscale-four-fixes", "title": "Tailscale：官方4项安全公告指定的最低修复版本为1.104.4", "body": "TS-2026-014至017涉及SSH Unix socket转发、SSH内存DoS、Serve Unix后端及HTTP/2 capability混用。官方安全通报指定最低版本为1.104.4。另一方面，更新日志仍存在更新时差。不能将其认定为已修复Tailworm全部11项问题。", "action": "核实实际运行的客户端是否为1.104.4或更高版本，并核对SSH/Serve的使用条件。如需临时停止SSH转发，应使用TS_SSH_DISABLE_FORWARDING=1并重启守护进程。不要将headscale或实验性连接器纳入相同的修复范围。", "sources": [ { "name": "公式Security Bulletins", "url": "https://tailscale.com/security-bulletins" }, { "name": "公式v1.104.4", "url": "https://github.com/tailscale/tailscale/releases/tag/v1.104.4" }, { "name": "研究者報告の条件", "url": "https://tailworm.com/" } ], "kind": "scope-complement", "time": "持续核实10/26的安全通报及10/27的tag", "cve_ids": [], "certainty": "confirmed-publication", "date": "2026-10-28" }, { "id": "fireblocks-no-fix", "title": "Fireblocks mpc-lib：评估修订后仍未提供修复版本", "body": "CERT VU701544于27日14:45 UTC修订。可能从后代份额及chain code推导到同一MPC参与方的祖先或根份额，但这不等于突破阈值并获得完整的转账密钥。实际盗窃情况、金额及受害客户数量尚未公布。", "action": "应按尚无修复版本处理，将chain code作为机密信息保护，并调查整个层级。不要将另一起eMudhra事件的Agent 2.4.4 / SDK 2.19.1当作此漏洞的修复版本。", "sources": [ { "name": "CERT VU701544", "url": "https://kb.cert.org/vuls/id/701544" } ], "kind": "delta", "time": "10/27 23:45 JST 修订", "cve_ids": [ "CVE-2026-90975" ], "certainty": "confirmed-publication", "date": "2026-10-28" }, { "id": "fortinet-fips", "title": "Fortinet FIPS：7.4应对版本与7.2标注不一致", "body": "27日的技术文章表示FIPS加固版本已经可用。7.4对应FIPS-CC-74-15 b9481。7.2的正文b9883与下载路径b9893不一致。7.0 FIPS已结束延长支持，本次无提供版本的计划。", "action": "通过官方ReadMe及支持下载页面核对型号与构建号。不要依据7.2中含糊的编号自动应用更新。不要将GA版本的加固表套用为尚未获取的PSIRT公告中各漏洞的最低修复版本。", "sources": [ { "name": "Fortinet技術記事", "url": "https://community.fortinet.com/fortigate-3/frontier-ai-assisted-firmware-updates-for-fips-enabled-fortigates-october-2026-230877" }, { "name": "公式hardening案内", "url": "https://www.fortinet.com/blog/ciso-collective/fortinet-releases-security-hardening-release-for-multiple-products" } ], "kind": "delta", "time": "10/27官方更新", "cve_ids": [], "certainty": "confirmed-publication", "date": "2026-10-28" }, { "id": "litellm-supplychain-response", "title": "LiteLLM：分发渠道遭入侵后应撤销密钥并重建环境", "body": "10月21日的事件已确认恶意1.107.0及容器实际被分发。23日的攻击链报告说明了从未撤销的master key获取publisher token等的过程。不要将3月另一起事件的受害数量套用于本次事件。", "action": "核实相关时间段内的安装及执行路径。在简单执行pip更新之前，应先隔离并重建环境，撤销并更换当时可能被访问的密钥。本次产品GHSA修复版本与入侵后的安全核实属于不同事项。", "sources": [ { "name": "公式10月21日incident", "url": "https://docs.litellm.ai/blog/security-incident-oct-21-2026" }, { "name": "公式攻撃連鎖分析", "url": "https://docs.litellm.ai/blog/security-incident-oct-21-2026-attack-chain" } ], "kind": "scope-complement", "time": "10/21事件 / 持续跟进10/23的分析", "cve_ids": [], "certainty": "confirmed-publication", "date": "2026-10-28" }, { "id": "malware-packages", "title": "恶意包：单独核实GHSA malware分类的27项安全公告", "body": "包括trajmetrics 0.5.3、numprint 1.2.0、@azure-growth/signup-ux-components 1.2.2/1.2.3等。下方范围为GitHub安全公告标注的影响范围。不能据此认定所有名称相似的正规包均已遭入侵。不要将27项安全公告计为27家新增受害组织。", "action": "核对lockfile、SBOM及下载缓存，不要通过执行可疑制品来验证。如已安装或执行，应隔离并重建环境，撤销当时可能被访问的凭据。未列出修复版本，不代表存在安全版本，也不代表仅升级版本即可解决。", "sources": [ { "name": "GitHub malware勧告 GHSA-rm9p-x4m7-hxmp", "url": "https://github.com/advisories/GHSA-rm9p-x4m7-hxmp" }, { "name": "GitHub malware勧告 GHSA-vc33-3x34-x6jm", "url": "https://github.com/advisories/GHSA-vc33-3x34-x6jm" }, { "name": "GitHub malware勧告 GHSA-ph3g-jrf5-8792", "url": "https://github.com/advisories/GHSA-ph3g-jrf5-8792" }, { "name": "GitHub malware勧告 GHSA-h5wr-j55v-8m79", "url": "https://github.com/advisories/GHSA-h5wr-j55v-8m79" }, { "name": "GitHub malware勧告 GHSA-v9xw-mxj4-fm5q", "url": "https://github.com/advisories/GHSA-v9xw-mxj4-fm5q" }, { "name": "GitHub malware勧告 GHSA-2732-c6cp-rx5v", "url": "https://github.com/advisories/GHSA-2732-c6cp-rx5v" }, { "name": "GitHub malware勧告 GHSA-r889-j2qv-2jv6", "url": "https://github.com/advisories/GHSA-r889-j2qv-2jv6" }, { "name": "GitHub malware勧告 GHSA-v383-2358-576w", "url": "https://github.com/advisories/GHSA-v383-2358-576w" }, { "name": "GitHub malware勧告 GHSA-wh86-6qm8-xgw2", "url": "https://github.com/advisories/GHSA-wh86-6qm8-xgw2" }, { "name": "GitHub malware勧告 GHSA-7p7m-8jmq-qp93", "url": "https://github.com/advisories/GHSA-7p7m-8jmq-qp93" }, { "name": "GitHub malware勧告 GHSA-84fw-gj66-p5v3", "url": "https://github.com/advisories/GHSA-84fw-gj66-p5v3" }, { "name": "GitHub malware勧告 GHSA-g9fj-q87h-6h4c", "url": "https://github.com/advisories/GHSA-g9fj-q87h-6h4c" }, { "name": "GitHub malware勧告 GHSA-r9qx-xcg2-7wcc", "url": "https://github.com/advisories/GHSA-r9qx-xcg2-7wcc" }, { "name": "GitHub malware勧告 GHSA-r77r-rw3m-rjh5", "url": "https://github.com/advisories/GHSA-r77r-rw3m-rjh5" }, { "name": "GitHub malware勧告 GHSA-6crh-vwr2-4qfp", "url": "https://github.com/advisories/GHSA-6crh-vwr2-4qfp" }, { "name": "GitHub malware勧告 GHSA-wmfr-2pvv-wmf3", "url": "https://github.com/advisories/GHSA-wmfr-2pvv-wmf3" }, { "name": "GitHub malware勧告 GHSA-wfcx-722r-fg5h", "url": "https://github.com/advisories/GHSA-wfcx-722r-fg5h" }, { "name": "GitHub malware勧告 GHSA-hc8w-gq4q-fr74", "url": "https://github.com/advisories/GHSA-hc8w-gq4q-fr74" }, { "name": "GitHub malware勧告 GHSA-hpc9-fxqh-hhf8", "url": "https://github.com/advisories/GHSA-hpc9-fxqh-hhf8" }, { "name": "GitHub malware勧告 GHSA-w9mp-cvjp-jfqp", "url": "https://github.com/advisories/GHSA-w9mp-cvjp-jfqp" }, { "name": "GitHub malware勧告 GHSA-rh7q-f888-q36c", "url": "https://github.com/advisories/GHSA-rh7q-f888-q36c" }, { "name": "GitHub malware勧告 GHSA-32g3-f74c-pcxq", "url": "https://github.com/advisories/GHSA-32g3-f74c-pcxq" }, { "name": "GitHub malware勧告 GHSA-9mgv-25w8-jwhf", "url": "https://github.com/advisories/GHSA-9mgv-25w8-jwhf" }, { "name": "GitHub malware勧告 GHSA-fxw2-4j5q-6hwg", "url": "https://github.com/advisories/GHSA-fxw2-4j5q-6hwg" }, { "name": "GitHub malware勧告 GHSA-hh3m-f424-g8v5", "url": "https://github.com/advisories/GHSA-hh3m-f424-g8v5" }, { "name": "GitHub malware勧告 GHSA-9gcx-88qx-rxch", "url": "https://github.com/advisories/GHSA-9gcx-88qx-rxch" }, { "name": "GitHub malware勧告 GHSA-m8mp-r4jx-43fw", "url": "https://github.com/advisories/GHSA-m8mp-r4jx-43fw" } ], "advisories": [ { "id": "GHSA-rm9p-x4m7-hxmp", "summary": "Malicious code in trajmetrics (PyPI)", "url": "https://github.com/advisories/GHSA-rm9p-x4m7-hxmp", "published_at": "2026-10-28T03:31:51Z", "updated_at": "2026-10-28T03:31:52Z", "packages": [ { "package": { "ecosystem": "pip", "name": "trajmetrics" }, "vulnerable_version_range": "= 0.5.3", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-vc33-3x34-x6jm", "summary": "Malware in glyphmatrix-fixture", "url": "https://github.com/advisories/GHSA-vc33-3x34-x6jm", "published_at": "2026-10-28T02:16:19Z", "updated_at": "2026-10-28T02:22:49Z", "packages": [ { "package": { "ecosystem": "npm", "name": "glyphmatrix-fixture" }, "vulnerable_version_range": "= 1.0.0", "first_patched_version": null, "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "glyphmatrix-fixture" }, "vulnerable_version_range": "= 1.0.1", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-ph3g-jrf5-8792", "summary": "Malware in csec-form-validatorr", "url": "https://github.com/advisories/GHSA-ph3g-jrf5-8792", "published_at": "2026-10-27T23:04:33Z", "updated_at": "2026-10-27T23:04:36Z", "packages": [ { "package": { "ecosystem": "npm", "name": "csec-form-validatorr" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-h5wr-j55v-8m79", "summary": "Malware in ccsseecc-form-validator", "url": "https://github.com/advisories/GHSA-h5wr-j55v-8m79", "published_at": "2026-10-27T23:04:33Z", "updated_at": "2026-10-27T23:04:34Z", "packages": [ { "package": { "ecosystem": "npm", "name": "ccsseecc-form-validator" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-v9xw-mxj4-fm5q", "summary": "Malware in ccsseecc-crypto-toolkit", "url": "https://github.com/advisories/GHSA-v9xw-mxj4-fm5q", "published_at": "2026-10-27T23:04:33Z", "updated_at": "2026-10-27T23:04:34Z", "packages": [ { "package": { "ecosystem": "npm", "name": "ccsseecc-crypto-toolkit" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-2732-c6cp-rx5v", "summary": "Malware in ccsec-crypto-toolkit", "url": "https://github.com/advisories/GHSA-2732-c6cp-rx5v", "published_at": "2026-10-27T23:04:33Z", "updated_at": "2026-10-27T23:04:34Z", "packages": [ { "package": { "ecosystem": "npm", "name": "ccsec-crypto-toolkit" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-r889-j2qv-2jv6", "summary": "Malware in ccsec-form-validator", "url": "https://github.com/advisories/GHSA-r889-j2qv-2jv6", "published_at": "2026-10-27T23:04:33Z", "updated_at": "2026-10-27T23:04:34Z", "packages": [ { "package": { "ecosystem": "npm", "name": "ccsec-form-validator" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-v383-2358-576w", "summary": "Malware in csec-crypto-toolkit", "url": "https://github.com/advisories/GHSA-v383-2358-576w", "published_at": "2026-10-27T23:04:33Z", "updated_at": "2026-10-27T23:04:33Z", "packages": [ { "package": { "ecosystem": "npm", "name": "csec-crypto-toolkit" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-wh86-6qm8-xgw2", "summary": "Malware in csec-form-validator", "url": "https://github.com/advisories/GHSA-wh86-6qm8-xgw2", "published_at": "2026-10-27T23:04:33Z", "updated_at": "2026-10-27T23:04:33Z", "packages": [ { "package": { "ecosystem": "npm", "name": "csec-form-validator" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-7p7m-8jmq-qp93", "summary": "Malware in agentenact", "url": "https://github.com/advisories/GHSA-7p7m-8jmq-qp93", "published_at": "2026-10-27T21:39:03Z", "updated_at": "2026-10-27T21:39:14Z", "packages": [ { "package": { "ecosystem": "npm", "name": "agentenact" }, "vulnerable_version_range": "= 0.2.0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-84fw-gj66-p5v3", "summary": "Malware in dsh-vm-tester", "url": "https://github.com/advisories/GHSA-84fw-gj66-p5v3", "published_at": "2026-10-27T20:02:26Z", "updated_at": "2026-10-27T20:04:08Z", "packages": [ { "package": { "ecosystem": "npm", "name": "dsh-vm-tester" }, "vulnerable_version_range": "= 0.1.4", "first_patched_version": null, "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "dsh-vm-tester" }, "vulnerable_version_range": "= 0.1.2", "first_patched_version": null, "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "dsh-vm-tester" }, "vulnerable_version_range": "= 0.1.3", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-g9fj-q87h-6h4c", "summary": "Malicious code in numprint (PyPI)", "url": "https://github.com/advisories/GHSA-g9fj-q87h-6h4c", "published_at": "2026-10-27T18:31:02Z", "updated_at": "2026-10-27T18:31:03Z", "packages": [ { "package": { "ecosystem": "pip", "name": "numprint" }, "vulnerable_version_range": "= 1.2.0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-r9qx-xcg2-7wcc", "summary": "Malware in 6161test1234", "url": "https://github.com/advisories/GHSA-r9qx-xcg2-7wcc", "published_at": "2026-10-27T16:29:06Z", "updated_at": "2026-10-27T16:29:06Z", "packages": [ { "package": { "ecosystem": "npm", "name": "6161test1234" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-r77r-rw3m-rjh5", "summary": "Malware in adyen-web-v6", "url": "https://github.com/advisories/GHSA-r77r-rw3m-rjh5", "published_at": "2026-10-27T16:23:53Z", "updated_at": "2026-10-27T16:23:54Z", "packages": [ { "package": { "ecosystem": "npm", "name": "adyen-web-v6" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-6crh-vwr2-4qfp", "summary": "Malware in buttoncontent", "url": "https://github.com/advisories/GHSA-6crh-vwr2-4qfp", "published_at": "2026-10-27T16:17:39Z", "updated_at": "2026-10-27T16:17:40Z", "packages": [ { "package": { "ecosystem": "npm", "name": "buttoncontent" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-wmfr-2pvv-wmf3", "summary": "Malware in @tableau__catalog-messages/database_lower", "url": "https://github.com/advisories/GHSA-wmfr-2pvv-wmf3", "published_at": "2026-10-27T16:05:21Z", "updated_at": "2026-10-27T16:05:22Z", "packages": [ { "package": { "ecosystem": "npm", "name": "@tableau__catalog-messages/database_lower" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-wfcx-722r-fg5h", "summary": "Malware in string-target-mapper-hash", "url": "https://github.com/advisories/GHSA-wfcx-722r-fg5h", "published_at": "2026-10-27T15:49:52Z", "updated_at": "2026-10-27T15:49:54Z", "packages": [ { "package": { "ecosystem": "npm", "name": "string-target-mapper-hash" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-hc8w-gq4q-fr74", "summary": "Malware in @flexmr/survey-conversation", "url": "https://github.com/advisories/GHSA-hc8w-gq4q-fr74", "published_at": "2026-10-27T15:49:52Z", "updated_at": "2026-10-27T15:49:54Z", "packages": [ { "package": { "ecosystem": "npm", "name": "@flexmr/survey-conversation" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-hpc9-fxqh-hhf8", "summary": "Malware in @flexmr/utils", "url": "https://github.com/advisories/GHSA-hpc9-fxqh-hhf8", "published_at": "2026-10-27T15:49:52Z", "updated_at": "2026-10-27T15:49:53Z", "packages": [ { "package": { "ecosystem": "npm", "name": "@flexmr/utils" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-w9mp-cvjp-jfqp", "summary": "Malware in fetch-hash-cache-atomic", "url": "https://github.com/advisories/GHSA-w9mp-cvjp-jfqp", "published_at": "2026-10-27T15:49:52Z", "updated_at": "2026-10-27T15:49:53Z", "packages": [ { "package": { "ecosystem": "npm", "name": "fetch-hash-cache-atomic" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-rh7q-f888-q36c", "summary": "Malware in @flexmr/survey-client", "url": "https://github.com/advisories/GHSA-rh7q-f888-q36c", "published_at": "2026-10-27T15:49:52Z", "updated_at": "2026-10-27T15:49:53Z", "packages": [ { "package": { "ecosystem": "npm", "name": "@flexmr/survey-client" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-32g3-f74c-pcxq", "summary": "Malware in macro-kernel-record-reader", "url": "https://github.com/advisories/GHSA-32g3-f74c-pcxq", "published_at": "2026-10-27T15:49:52Z", "updated_at": "2026-10-27T15:49:53Z", "packages": [ { "package": { "ecosystem": "npm", "name": "macro-kernel-record-reader" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-9mgv-25w8-jwhf", "summary": "Malware in paychex-pdftron", "url": "https://github.com/advisories/GHSA-9mgv-25w8-jwhf", "published_at": "2026-10-27T15:12:12Z", "updated_at": "2026-10-27T15:12:17Z", "packages": [ { "package": { "ecosystem": "npm", "name": "paychex-pdftron" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-fxw2-4j5q-6hwg", "summary": "Malware in sc-announcer", "url": "https://github.com/advisories/GHSA-fxw2-4j5q-6hwg", "published_at": "2026-10-27T15:12:12Z", "updated_at": "2026-10-27T15:12:12Z", "packages": [ { "package": { "ecosystem": "npm", "name": "sc-announcer" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-hh3m-f424-g8v5", "summary": "Malware in ccl-global-shopping", "url": "https://github.com/advisories/GHSA-hh3m-f424-g8v5", "published_at": "2026-10-27T15:12:12Z", "updated_at": "2026-10-27T15:12:12Z", "packages": [ { "package": { "ecosystem": "npm", "name": "ccl-global-shopping" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-9gcx-88qx-rxch", "summary": "Malware in sc-hydrate-carousel-price", "url": "https://github.com/advisories/GHSA-9gcx-88qx-rxch", "published_at": "2026-10-27T15:12:12Z", "updated_at": "2026-10-27T15:12:12Z", "packages": [ { "package": { "ecosystem": "npm", "name": "sc-hydrate-carousel-price" }, "vulnerable_version_range": ">= 0", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" }, { "id": "GHSA-m8mp-r4jx-43fw", "summary": "Malicious code in @azure-growth/signup-ux-components (npm)", "url": "https://github.com/advisories/GHSA-m8mp-r4jx-43fw", "published_at": "2026-10-27T12:30:32Z", "updated_at": "2026-10-27T12:30:35Z", "packages": [ { "package": { "ecosystem": "npm", "name": "@azure-growth/signup-ux-components" }, "vulnerable_version_range": "= 1.2.2", "first_patched_version": null, "vulnerable_functions": [] }, { "package": { "ecosystem": "npm", "name": "@azure-growth/signup-ux-components" }, "vulnerable_version_range": "= 1.2.3", "first_patched_version": null, "vulnerable_functions": [] } ], "type": "malware" } ], "kind": "delta", "time": "本次GHSA公开时间窗口 / malware分类", "certainty": "confirmed-publication", "date": "2026-10-28", "cve_ids": [] } ], "caveats": [ "基准时间为2026-10-28 13:18:44 JST。获取的是基准时间之后的当前修订版，并不还原基准时间之前的所有版本。", "核查了NVD公开与修订、GHSA reviewed/unreviewed/malware、KEV、国内外官方安全公告及所选事件的后续消息。这并非覆盖全球所有事件的统计。", "公开与修订存在重复。不会将漏洞、安全公告、包、组织及受害人数相加作为事件数量。reviewed是GitHub上的分类，并不代表已确认实际利用。", "本次调查数据涉及所选后续消息及安全公告中的要点。这不意味着过去尚未解决的事件已经消失，也请参阅历史台账。", "收录于KEV表示已确认该漏洞遭到利用，并非确认所有集成相关组件的产品均已遭入侵。取证指示栏中的No不应理解为无需开展入侵调查。", "获取失败及challenge响应保留在所获取原始资料的元数据中。不会将无法获取的信息计为更新0条。", "更新最新日文台账。已保存的译文是标明原始基准时间的归档，不视为已完成新增信息的翻译。", "首次获取NVD修订数据时超时。通过每批500条重新获取，已取得全部1,911条。也保存了首次失败的信息，不混淆获取0条与更新0条。" ], "report": { "path": "update-20261028-1318.html", "title": "10月28日13:18 — 广泛的漏洞应对措施及现实影响", "headline": "需要尽快修复的问题，以及已经让日常生活停摆的事件。", "intro": "涵盖Brotli、Commerce的已知利用情况，GMO、@link的后续消息，以及网络设备、浏览器、AI、认证和开发基础设施。可通过不同列表分别查看实际损害与潜在风险。", "window_jst": "10月27日18:47〜10月28日13:18:44 JST", "cutoff_jst_label": "2026-10-28 13:18:44 JST / 2026-10-28 04:18:44 UTC", "retrieved_jst": "10月28日13:21 JST以降の現行改訂", "previous": "update-20261027-1847.html", "previous_label": "10月27日18:47の調査記録", "motion_path": "/impact", "motion_label": "現実世界への影響を読む", "quick": [ { "title": "对日常生活与工作的实际影响", "text": "附上来源，整理医疗预约、云服务、个人信息及金钱方面的影响。不估算未经确认的损失金额。", "href": "/impact", "label": "影响列表" }, { "title": "公共基础设施的优先更新", "text": "确认Brotli和Commerce已新增至KEV。按实际运行的产品及版本系列检查是否已修复。", "href": "#kev-brotli-commerce", "label": "已确认的利用情况及应对措施" }, { "title": "AI、认证与开发基础设施", "text": "根据各项安全公告的影响范围，核查MLflow、MCP、Authlib、Better Auth、GitPython等。", "href": "#oss-modelcontextprotocol-python-sdk", "label": "MCP的额外配置" }, { "title": "终端与网络", "text": "检查NetScaler、PAN-OS、WatchGuard、浏览器及邮件软件。计划发布与完成部署是不同事项。", "href": "#watchguard-fireware", "label": "终端与设备" } ], "continuity_note": "提供された修正版の導入、稼働版の確認、漏れたsecretの失効、侵害調査、サービス再開は別の作業です。最新の公式案内を確認し、予定や試験運用を全体復旧済みと読み替えないでください。" } } }