Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
Saved searches 0
Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.
Threads
Related changes across sources- Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref in github.com/xuri/excelize Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Panic on out-of-order cell column references when reading worksheets in github.com/xuri/excelize Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- GetConditionalFormats indexes conditional-formatting rule sub-elements with no length / nil check in github.com/xuri/excelize Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader in github.com/xuri/excelize Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml in github.com/xuri/excelize Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs in github.com/openchoreo/openchoreo Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization in github.com/moov-io/signedxml Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- reSIProcate reTurn client through 1.14.0 Heap Buffer Overflow via TurnTcpSocket Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
- Jira Software Data Center: Injection fast-uri Dependency (CVE-2026-13676) Advisory content revised: fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its or…2 linked entries across history · in Security Follow evidence and connection reasons
- Confluence Data Center: File Inclusion extract-zip Dependency (CVE-2026-19693) Advisory content revised: extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the d…2 linked entries across history · in Security Follow evidence and connection reasons
- SiYuan: Missing consistency check between packageName and repoURL/repoHash in bazaar package install allows overwriting an existing, trusted plugin in github.com/siyuan-note/siyuan/kernel Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- espressif/mdns has Uncontrolled Recursion in mDNS Name Decompression Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- SuiteCRM: SQL injection via search param in modules/Cases/controller.php Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- SiYuan: The publish filter for database backlinks consults the forbidden list instead of the visibility list, disclosing hidden-tier documents to anonymous readers in github.com/siyuan-note/siyuan/kernel Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- SiYuan: A parser differential between the WebSocket keepalive exemption and the session quarantine allows unauthenticated access to the broadcast event stream in github.com/siyuan-note/siyuan/kernel Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports as forbidden in github.com/siyuan-note/siyuan/kernel Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Improper Input Validation in Modem Firmware Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
- Distribution: Client does not verify returned content against requested digest in github.com/distribution/distribution Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items in github.com/getkin/kin-openapi Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
- Azure service-tag requirements and limitations Guidance changed2 linked entries across history · in Azure Follow evidence and connection reasons
- Conditional Access grant controls Guidance changed2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
- Enterprise App Management Guidance changed2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
- The cloud.microsoft domain Guidance changed2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
- Planner: Planner Agent in Copilot V2 Improvements Message Center · Plan for change: MC1539002: Microsoft Copilot Chat: Planner Agent task assignment, catch-up, and Copilot memory integration2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
- Dynamics 365 Field Service: Modernize the mobile offline foundation Date moved later2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
- Dynamics 365 Field Service: Enhance mobile offline up-sync Date moved later2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
- Dynamics 365 Field Service: Improve mobile offline reliability across network conditions Date moved later2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
- SharePoint: Copilot Search in SharePoint and OneDrive Message Center · Plan for change: MC1540513: Microsoft SharePoint Online and OneDrive for the web: Updated search experience with Copilot Search2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
- Microsoft Teams: Language selection by users in Teams Rooms on Android Roadmap entry4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
- Microsoft Purview: Information Protection- New Summary Metrics in Content Explorer for Unscanned Files and Classification History Details Notice updated: MC1217640: Microsoft Purview | Information Protection - Content Explorer: Unscanned data and Classification History summary metrics3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons