最近六个月的全部 CVE，每天更新。

显示 4 条中的 4 条

• 高CVE-2026-22068CVSS 评分 8.22026年7月29日

  Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.X through 10.1.3, from 9.0.X through 9.2.14. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue.

  CWE-777apache traffic_server
• 中CVE-2026-56021CVSS 评分 5.32026年6月18日

  Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.

  CWE-185CWE-777webmin webmin
• 高CVE-2026-40110CVSS 评分 7.32026年5月5日

  Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to check incoming origins against the allow_origin_pat configuration value. Because re.match() only anchors at the

  CWE-777CWE-625jupyter jupyter_server
• 中CVE-2026-39087CVSS 评分 6.42026年4月23日

  ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.

  CWE-777CWE-94