過去6か月のすべてのCVEを、毎日更新します。

4件中4件を表示

• 高CVE-2026-22068CVSSスコア 8.22026/07/29

  Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.X through 10.1.3, from 9.0.X through 9.2.14. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue.

  CWE-777apache traffic_server
• 中CVE-2026-56021CVSSスコア 5.32026/06/18

  Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.

  CWE-185CWE-777webmin webmin
• 高CVE-2026-40110CVSSスコア 7.32026/05/05

  Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to check incoming origins against the allow_origin_pat configuration value. Because re.match() only anchors at the

  CWE-777CWE-625jupyter jupyter_server
• 中CVE-2026-39087CVSSスコア 6.42026/04/23

  ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.

  CWE-777CWE-94