Rexpository

**اسم البرنامج المصاب والإصدارات المتأثرة** ImageMagick الإصدارات السابقة لـ 6.9.13-57 ImageMagick الإصدارات السابقة لـ 7.1.2-32 **Description** توجد ثغرة حقن برمجيات في مفكك ترميز MVG عند استخدام برنامج رندرة PostScript. يمكن للمهاجم تقديم ملف MVG مصمم خصيصاً يقوم، عند فك ترميزه، بحقن كود في مسار رندرة PostScript. **Recommendations** التحديث إلى الإصدار 6.9.13-57 أو أحدث. التحديث إلى الإصدار 7.1.2-32 أو أحدث.

**اسم البرنامج المصاب والإصدارات المتأثرة** ImageMagick الإصدارات السابقة لـ 7.1.2-32 **Description** يحدث سباق في الروابط الرمزية من نوع time-of-check time-of-use (TOCTOU) عند تنفيذ نص magick البرمجي. يسمح هذا للمهاجمين بتجاوز سياسة أمان المسار عن طريق استبدال المسار الذي تم التحقق منه برابط رمزي أثناء التنفيذ، مما يمكنهم من قراءة الملفات التي تهدف سياسة الأمان إلى حظرها. **Recommendations** التحديث إلى الإصدار 7.1.2-32 أو إصدار أحدث.

**اسم البرنامج المصاب والإصدارات المتأثرة** ImageMagick الإصدارات السابقة لـ 7.1.2-32 **Description** يوجد تجاوز للسياسات في عملية `-script` بسبب فقدان التحقق من معالجة واصفات الملفات. يمكن للمهاجمين استخدام عملية `-script` لإغلاق واصفات ملفات لم يتم فتحها بواسطة العملية الحالية، مما يؤدي إلى التحايل على سياسات الأمان المكونة. **Recommendations** التحديث إلى الإصدار 7.1.2-32 أو أحدث.

SurrealDB from 3.0.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated record users to read records in other namespaces or databases by resolving record ids through FETCH. Attackers can switch to a foreign namespace/database and name a known record id in a RETURN … FETCH query to read another tenant's data when table PERMISSIONS allow reads.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 6.9.13-56 ImageMagick versions prior to 7.1.2-31 **Description** Code injection is possible in the PostScript coders because certain values are not properly escaped or trimmed during output. This allows attackers to embed arbitrary PostScript code into generated files by providing specially crafted values. **Recommendations** Update to version 6.9.13-56 or later. Update to version 7.1.2-31 or later.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 7.1.2-31 **Description** A heap buffer overflow occurs when a crafted call is made to the 'GetVirtualPixels' API. This allows attackers to overwrite heap memory through crafted input, which can lead to a server crash and a resulting denial of service. A heap buffer overflow is a condition where a program writes more data to a heap-allocated memory block than it can hold. **Recommendations** Update to version 7.1.2-31 or later.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 7.1.2-31 **Description** A resource leak occurs when the software processes a crafted magick script, allowing attackers to leave file pointers open. This leads to the leakage of file descriptors, which can exhaust system resources and result in a denial of service. **Recommendations** Update to version 7.1.2-31 or later.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 6.9.13-56 ImageMagick versions prior to 7.1.2-31 **Description** A denial of service issue exists in the MVG decoder due to a missing limit check. An attacker can provide a specially crafted MVG image that triggers a long-running decoding operation, leading to excessive CPU resource consumption and stalling image processing. **Recommendations** Update to version 6.9.13-56 or later. Update to version 7.1.2-31 or later.

**Name of the Vulnerable Software and Affected Versions** JupyterLab versions 4.0.0 through 4.5.10 JupyterLab versions 4.6.0 through 4.6.3 **Description** In the PyPI Extension Manager, the `ExtensionHandler.post` function validates extension names during installation but fails to reject option-like values during uninstallation. These values are passed directly to `PyPIExtensionManager.uninstall` and the `python -m pip uninstall` command. An authenticated user with access to the extension API can provide a pip requirements option to force the server to read a local file or fetch an internal URL, where reflected parse errors may reveal the first unparsable line or response content. Additionally, a pip log option can be used to create or corrupt a specific file path with pip-generated log text. This issue requires the PyPI Extension Manager to be enabled and the user to have extension API access. **Recommendations** Update JupyterLab to version 4.5.11 or 4.6.4.

**Name of the Vulnerable Software and Affected Versions** JupyterLab versions 4.5.0 through 4.5.10 JupyterLab versions 4.6.0 through 4.6.3 Notebook versions 7.5.0 through 7.6.2 JupyterLite Core versions 0.7.0 through 0.8.3 **Description** The system clipboard cell-paste path accepts attacker-controlled cell JSON without clearing the `metadata.trusted` attribute. When the `useSystemClipboardForCells` setting is active and `pasteCodeCellsWithoutOutput` is disabled, a pasted code cell can mark HTML output as trusted. This allows the bypass of output sanitization and the execution of scripts within the authenticated JupyterLab origin without requiring the cell to be executed. Markdown and raw cells are not affected as their output is sanitized. **Recommendations** Update JupyterLab to version 4.5.11 or 4.6.4. Update Notebook to version 7.6.3. Update JupyterLite Core to version 0.8.4.

**Name of the Vulnerable Software and Affected Versions** vm2 versions prior to 3.12.2 **Description** The software fails to apply the Buffer backing-store ownership invariant to Buffers returned from host builtin modules. When the `zlib` module is exposed via the NodeVM builtin allowlist, the `zlib.deflateSync()` function can return a Buffer backed by the shared small-buffer pool. This allows untrusted guest code to create a full-width view of the `ArrayBuffer` to read and modify bytes from unrelated host buffers, leading to memory disclosure and corruption across the sandbox boundary. **Recommendations** Update to version 3.12.2 or later. Restrict the use of the `zlib` module in the NodeVM builtin allowlist to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.7.1 **Description** An authorization bypass exists in the `/voice set` endpoint. This allows senders from external channels who are not owners to persist Gateway voice configuration. Attackers with command access can modify the voice used by Talk responses for the configured provider, which compromises configuration integrity. This issue does not expose credentials or grant additional host capabilities. **Recommendations** Update to version 2026.7.1 or later. As a temporary mitigation, restrict access to the `/voice set` command.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.7.1 **Description** Global Active Memory toggle mutations may omit owner authorization checks. This allows an authorized non-owner external-channel sender to persistently enable or disable Active Memory for the Gateway. Consequently, memory recall for future sessions can be disabled, or global recall can be re-enabled against the owner's expectations. This issue is restricted to persistent global on/off mutations, while session-level controls and read-only status continue to be managed by the existing command policy. **Recommendations** Update to version 2026.7.1.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.8.2 **Description** A denial of service issue exists in the Browser extension relay. Unauthenticated network sources can exhaust the pending-authentication capacity by maintaining silent WebSocket upgrades. This action occupies all available pending slots, which prevents paired extensions from completing the Browser Relay Authentication v2 process. **Recommendations** Update to version 2026.8.2.

**Name of the Vulnerable Software and Affected Versions** SiYuan versions prior to 3.8.4 **Description** An authentication bypass exists in the publish service where session cookies are issued without Secure or SameSite attributes over plaintext HTTP connections. An on-path attacker can observe a valid `publish-visitor-session-id` cookie during a Basic Auth exchange and replay it to access authenticated publish endpoints without the account password. **Recommendations** Update to version 3.8.4 or later.

**Name of the Vulnerable Software and Affected Versions** openclaw versions prior to 2026.7.1 **Description** The software incorrectly binds Signal approval reactions. When unrelated outbound messages and a pending approval exist in the same conversation, a reaction intended for a structured approval request may attach to ordinary outbound text. This can lead to an approver's reaction to unrelated text being interpreted as approving or denying a pending host action, depending on the request, conversation timing, and available process actions. This issue does not alter the authority of identified approvers. **Recommendations** Update to version 2026.7.1.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions 2026.4.10 through 2026.7.0 **Description** Persistent memory dreaming mutations omit owner permission checks. An authorized but non-owner external-channel sender can issue the '/dreaming on' and '/dreaming off' commands to enable or disable the Gateway's Memory Core dreaming behavior. This allows an attacker to disable background memory processing or re-enable durable memory promotion against the owner's expectations. The impact on confidentiality, integrity, and availability depends on the stored conversation material and subsequent memory use. Read-only status and help commands are not affected. **Recommendations** Update to version 2026.7.1. Disable dreaming commands in external channels. Restrict channel command access to owners.

**Name of the Vulnerable Software and Affected Versions** SiYuan versions prior to 3.8.4 **Description** The Electron main process in `app/electron/main.js` fails to validate the sender or restrict recipients within the 'siyuan-send-windows' IPC handler. The handler ignores the `event.sender` and forwards any received payload to all windows returned by `BrowserWindow.getAllWindows()`, including those from different opened workspaces. An attacker-controlled remote kernel can send a payload with the `cmd` variable set to "lockscreenByMode", which triggers the `lockScreen()` function in sibling workspace windows where `lockScreenMode` is set to 1. This can be used to repeatedly lock unrelated local workspace windows, resulting in a limited denial of service. **Recommendations** Update SiYuan to version 3.8.4 or later.

**Name of the Vulnerable Software and Affected Versions** SiYuan versions prior to 3.8.4 **Description** Insufficient HTML-escaping of the `data-subtype` attribute occurs when generating gutter-button markup from plain-text Markdown containing a Kramdown inline attribute list (IAL). The Lute renderer parses Kramdown IAL from text/plain input, allowing an attacker to use entity-encoded quotes in `data-subtype` to break out of the attribute value. This enables the injection of additional attributes, such as `autofocus` and `onfocus`. When the affected gutter control receives focus, the injected handler executes. In the Electron desktop application, where the main BrowserWindow enables Node integration and disables context isolation, this leads to remote code execution with renderer Node.js privileges. **Recommendations** Update to version 3.8.4.

**Name of the Vulnerable Software and Affected Versions** SiYuan versions prior to 3.8.4 **Description** An authorization omission exists in the `siyuan-get` IPC handler. This allows remote-kernel renderers to access native clipboard formats by invoking the `clipboardReadMathML()`, `clipboardReadOffice()`, and `clipboardReadWPS()` commands with matching plaintext. Attackers who control remote renderer content can obtain MathML formulas, Office bytes, and WPS bytes from the local clipboard during user-mediated paste operations. **Recommendations** Update to version 3.8.4 or later.