CVE ID :CVE-2026-104851 Published : Oct. 2, 2026, 4:36 p.m. | 45 minutes ago Description :fsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9.0 until 2026.6.0, fsspec.implementations.reference.ReferenceFileSystem evaluates fields from Kerchunk...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-104851 - fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

VERWANDTEARTIKEL

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

CVE-2026-94483 - Next.js: Server-Side Request Forgery in Image Optimization

CVE-2026-104846 - Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940)

CVE-2026-104847 - ProseMirror: XSS vulnerability in prosemirror-view's paste handling

CVE-2026-103648 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader

CVE-2026-90970 - Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway