西芒杜铁矿项目发布首份环境、社会和治理报告

yun2025

西芒杜铁矿项目发布首份环境、社会和治理报告

CodeChecker：分析统计数据解压前缺少大小上限

11月6日公开的漏洞记录CVE-2026-84161涉及CodeChecker。CodeChecker可接收并保存项目分析统计。启用相应存储设置后，有项目写入权限的网络客户端能提交压缩数据，服务端会一次性解压，却未设置展开后的大小限制。由此，小体积上传也可能造成显著的内存压力，影响其他请求。版本清单标出的受影响范围包括6.29.3之前的版本。

这条记录给出的CVSS 3.1基础评分为4.9分，分级为中危。按照评分列出的条件，利用者可通过网络接触相关功能，需要具备较高的既有权限，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为无、无、高。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU3ODAzOTE4OA==.html
https://v.youku.com/v_show/id_XNjU3ODA0MzUwOA==.html
https://v.youku.com/v_show/id_XNjU3ODA0MzUwNA==.html
https://v.youku.com/v_show/id_XNjU4NzczNzUwOA==.html
https://v.youku.com/v_show/id_XNjU4NzczNzQ4NA==.html
https://v.youku.com/v_show/id_XNjU3ODA0MTk3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODA0MTkyOA==.html
https://v.youku.com/v_show/id_XNjU4NzczNzQyOA==.html
https://v.youku.com/v_show/id_XNjU4NzczNzQxMg==.html
https://v.youku.com/v_show/id_XNjU3ODA0MDYwMA==.html
https://v.youku.com/v_show/id_XNjU4Nzc0MTcyMA==.html
https://v.youku.com/v_show/id_XNjU4NzczODg3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODA0NDg2OA==.html
https://v.youku.com/v_show/id_XNjU4Nzc0MTcxMg==.html
https://v.youku.com/v_show/id_XNjU4Nzc0MTY4MA==.html
https://v.youku.com/v_show/id_XNjU3ODA0NDg0NA==.html
https://v.youku.com/v_show/id_XNjU3ODAzOTAyNA==.html
https://v.youku.com/v_show/id_XNjU4NzczODgyOA==.html
https://v.youku.com/v_show/id_XNjU4NzczODc5Ng==.html
https://v.youku.com/v_show/id_XNjU4NzczODc4OA==.html
https://v.youku.com/v_show/id_XNjU3ODAzODk2OA==.html
https://v.youku.com/v_show/id_XNjU4Nzc0MDI0NA==.html
https://v.youku.com/v_show/id_XNjU3ODA0MTY4NA==.html
https://v.youku.com/v_show/id_XNjU3ODA0MDM4OA==.html
https://v.youku.com/v_show/id_XNjU3ODA0MTY3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODA0MDM0OA==.html
https://v.youku.com/v_show/id_XNjU4NzczNzEwMA==.html
https://v.youku.com/v_show/id_XNjU3ODAzNzMyMA==.html
https://v.youku.com/v_show/id_XNjU4NzczODY0MA==.html
https://v.youku.com/v_show/id_XNjU3ODAzMjcwNA==.html
https://v.youku.com/v_show/id_XNjU3ODAzODgyNA==.html
https://v.youku.com/v_show/id_XNjU3ODAzODgyMA==.html
https://v.youku.com/v_show/id_XNjU4Nzc0MDExNg==.html
https://v.youku.com/v_show/id_XNjU4NzczNzAxMg==.html
https://v.youku.com/v_show/id_XNjU4Nzc0MDA3Ng==.html
https://v.youku.com/v_show/id_XNjU4NzczNjk4OA==.html
https://v.youku.com/v_show/id_XNjU4Nzc0MDAzNg==.html
https://v.youku.com/v_show/id_XNjU3ODAzNzE4OA==.html
https://v.youku.com/v_show/id_XNjU3ODAzNTcwMA==.html
https://v.youku.com/v_show/id_XNjU3ODAzODc0MA==.html
https://v.youku.com/v_show/id_XNjU3ODAzMjU5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODAzMjU2OA==.html
https://v.youku.com/v_show/id_XNjU4NzczODUxMg==.html
https://v.youku.com/v_show/id_XNjU3ODAzNDE1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODAzNDE0OA==.html
https://v.youku.com/v_show/id_XNjU3ODAzNzA3Mg==.html
https://v.youku.com/v_show/id_XNjU4NzczNTc2OA==.html
https://v.youku.com/v_show/id_XNjU3ODA0MDAyMA==.html
https://v.youku.com/v_show/id_XNjU4NzczNjg0MA==.html
https://v.youku.com/v_show/id_XNjU4NzczNDI2NA==.html