《尼尔：自动人形》释出更新游戏容量从 50GB 暴涨至 366GB

yun2025

《尼尔：自动人形》释出更新游戏容量从 50GB 暴涨至 366GB

Kroki：绘图后端安全模式未覆盖全部文件读取操作

11月7日公开的漏洞记录CVE-2026-102359涉及Kroki。Kroki可将文字描述转换成图形。处理TikZ图表时，特定安全检查只拦截了一种文件读取方式，排版引擎还有其他读取操作可用。向绘图接口提交的内容因此可能接触服务器上的文件，即使部署者已经启用了预期用于隔离输入的安全模式。版本清单标出的受影响范围包括低于0.31.2。

这条记录给出的CVSS 3.1基础评分为7.5分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、无、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU4NzY4OTMwMA==.html
https://v.youku.com/v_show/id_XNjU4NzY5MzcyOA==.html
https://v.youku.com/v_show/id_XNjU4NzY5MjI0MA==.html
https://v.youku.com/v_show/id_XNjU4NzY5MjIzNg==.html
https://v.youku.com/v_show/id_XNjU4NzY4OTI3Mg==.html
https://v.youku.com/v_show/id_XNjU4NzY5MzcxNg==.html
https://v.youku.com/v_show/id_XNjU4NzY5MjIyMA==.html
https://v.youku.com/v_show/id_XNjU4NzY4OTI2MA==.html
https://v.youku.com/v_show/id_XNjU4NzY5MDcwMA==.html
https://v.youku.com/v_show/id_XNjU4NzY5MjIxNg==.html
https://v.youku.com/v_show/id_XNjU4NzY5MDcwNA==.html
https://v.youku.com/v_show/id_XNjU3Nzk5NDE0NA==.html
https://v.youku.com/v_show/id_XNjU3Nzk5NTcxMg==.html
https://v.youku.com/v_show/id_XNjU3Nzk5ODQyOA==.html
https://v.youku.com/v_show/id_XNjU4NzY4OTI1Mg==.html
https://v.youku.com/v_show/id_XNjU3Nzk5ODQyNA==.html
https://v.youku.com/v_show/id_XNjU3Nzk5NzMyOA==.html
https://v.youku.com/v_show/id_XNjU3Nzk5Mjc0MA==.html
https://v.youku.com/v_show/id_XNjU4NzY5MDY3Mg==.html
https://v.youku.com/v_show/id_XNjU4NzY5MzcwMA==.html
https://v.youku.com/v_show/id_XNjU4NzY5MjIwOA==.html
https://v.youku.com/v_show/id_XNjU3Nzk5NzMyNA==.html
https://v.youku.com/v_show/id_XNjU4NzY5MjE5Ng==.html
https://v.youku.com/v_show/id_XNjU4NzY5MDY5Mg==.html
https://v.youku.com/v_show/id_XNjU4NzY5MDY4OA==.html
https://v.youku.com/v_show/id_XNjU4NzY4OTI0NA==.html
https://v.youku.com/v_show/id_XNjU4NzY5MzcwNA==.html
https://v.youku.com/v_show/id_XNjU4NzY5MDY4NA==.html
https://v.youku.com/v_show/id_XNjU4NzY5NTI0NA==.html
https://v.youku.com/v_show/id_XNjU4NzY4OTI0MA==.html
https://v.youku.com/v_show/id_XNjU4NzY5MDY3Ng==.html
https://v.youku.com/v_show/id_XNjU4NzY5MjIwNA==.html
https://v.youku.com/v_show/id_XNjU4NzY5MDY4MA==.html
https://v.youku.com/v_show/id_XNjU4NzY5MjIwMA==.html
https://v.youku.com/v_show/id_XNjU3Nzk5MjczMg==.html
https://v.youku.com/v_show/id_XNjU3Nzk5ODQxNg==.html
https://v.youku.com/v_show/id_XNjU3Nzk5MjcyNA==.html
https://v.youku.com/v_show/id_XNjU4NzY5MzY5Mg==.html
https://v.youku.com/v_show/id_XNjU4NzY5MzY4OA==.html
https://v.youku.com/v_show/id_XNjU4NzY5MzY4NA==.html
https://v.youku.com/v_show/id_XNjU3Nzk5MjcyOA==.html
https://v.youku.com/v_show/id_XNjU3Nzk5NTcwMA==.html
https://v.youku.com/v_show/id_XNjU3Nzk5NTcwNA==.html
https://v.youku.com/v_show/id_XNjU3Nzk5NDEzNg==.html
https://v.youku.com/v_show/id_XNjU3Nzk5ODQxMg==.html
https://v.youku.com/v_show/id_XNjU4NzY5MzY4MA==.html
https://v.youku.com/v_show/id_XNjU3Nzk5ODQwOA==.html
https://v.youku.com/v_show/id_XNjU3Nzk5MjcxNg==.html
https://v.youku.com/v_show/id_XNjU3Nzk5NzMxNg==.html
https://v.youku.com/v_show/id_XNjU3Nzk5MjcwOA==.html