“榴莲拼盘”进博会首发 天猫启动全球美食新产地计划

yun2025

“榴莲拼盘”进博会首发 天猫启动全球美食新产地计划

Kroki：绘图后端安全模式未覆盖全部文件读取操作

11月7日公开的漏洞记录CVE-2026-102359涉及Kroki。Kroki可将文字描述转换成图形。处理TikZ图表时，特定安全检查只拦截了一种文件读取方式，排版引擎还有其他读取操作可用。向绘图接口提交的内容因此可能接触服务器上的文件，即使部署者已经启用了预期用于隔离输入的安全模式。版本清单标出的受影响范围包括低于0.31.2。

这条记录给出的CVSS 3.1基础评分为7.5分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、无、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://lightroom.adobe.com/shares/31127251407bff4da7a27352b174c4dd
https://lightroom.adobe.com/shares/d4401e184e68534a9677dcb966af175e
https://lightroom.adobe.com/shares/4da547eca7a53c4696206fc2d5fe49cf
https://lightroom.adobe.com/shares/66af581bff1be749b86c670ea6297571
https://lightroom.adobe.com/shares/1c82653794a6e14fb49e4c3f0523dc11
https://lightroom.adobe.com/shares/c363105fe30e74498db5f5a5fc2f1bc8
https://lightroom.adobe.com/shares/a89573a313b94c49991397daeaa79b4f
https://lightroom.adobe.com/shares/62766e15c6fa9e45b32a28275c45f3cb
https://lightroom.adobe.com/shares/d1add9b9e4c6714f9342112d430a5907
https://lightroom.adobe.com/shares/fcb6815fb07b634099aa72d276ad4101
https://lightroom.adobe.com/shares/566ff7cb03d4794e9d152e0b7834d474
https://lightroom.adobe.com/shares/bd62d7a58b9f634ca49c26974b6fc4c3
https://lightroom.adobe.com/shares/b7a709b43dde1e4cae000f315d42f89a
https://lightroom.adobe.com/shares/812343e421549e45984e946a4469fc8e
https://lightroom.adobe.com/shares/0ab160195234e74091d51f9e5c7299fe
https://lightroom.adobe.com/shares/c53f8228d8572643a85ffdb9e83e17a6
https://lightroom.adobe.com/shares/629bc367eaecd34d91230fbbedacd438
https://lightroom.adobe.com/shares/888f1fbfb7df444ab6435c4907abfd5f
https://lightroom.adobe.com/shares/60771580a3a3274eb57937b8e137ed72
https://lightroom.adobe.com/shares/b65d946a217327469fa344eb2fecd703
https://lightroom.adobe.com/shares/c3cf481f71d7b343b5e5a7ea252989aa
https://lightroom.adobe.com/shares/93e4ecd04bfbfa41a414f71ae1ded2d1
https://lightroom.adobe.com/shares/c69375e7b8ee7543947beb2aa29df76f
https://lightroom.adobe.com/shares/d370edb4c364ce4c855275d83becf4c8
https://lightroom.adobe.com/shares/4b9bfc5ab4ab1a4d82aa5e5139a376bb
https://lightroom.adobe.com/shares/7038ed8dfcd6f74fa0b09cf715e325a6
https://lightroom.adobe.com/shares/26e4e171891ac04ab4d03d16de4034f9
https://lightroom.adobe.com/shares/c79eb7e938c3b64389c6b4d8d27d58ea
https://lightroom.adobe.com/shares/21e85219fa8d4547bb8c61727b03e911
https://lightroom.adobe.com/shares/b1f518b98196984aa8bfc080508d557a
https://lightroom.adobe.com/shares/1d30c2ee1e337b47b35e39c712dc55a6
https://lightroom.adobe.com/shares/d77ac6410bd53a47b4422d760a24da21
https://lightroom.adobe.com/shares/f290e33708edf340b98a06626a924749
https://lightroom.adobe.com/shares/ab5b721f1f5e4145a4da35ae0ae730d2
https://lightroom.adobe.com/shares/5bf25e7f1de8464da597b367f9b856ce
https://lightroom.adobe.com/shares/3cd9e44eafd40a4fbda41f380a30572c
https://lightroom.adobe.com/shares/3db8b42742ae7c4aa7244b43dfe5a8c5
https://lightroom.adobe.com/shares/9f64968002b7a9449014ac4caae962ed
https://lightroom.adobe.com/shares/6da5b404bf257d42a203a447f4f9dcf1
https://lightroom.adobe.com/shares/b8eee4c129c3c34c801e480c81cc5d48
https://lightroom.adobe.com/shares/134976e65996724bb5123c62028e55ce
https://lightroom.adobe.com/shares/47932e3218c5a44b975b20fdf1ff1be6
https://lightroom.adobe.com/shares/0af81732b223d7468aff2cfb98344040
https://lightroom.adobe.com/shares/7e09ae72f7172c4c8bb6d498d7968e22
https://lightroom.adobe.com/shares/d25f80819bec4c4d9a392dd8e06ecddc
https://lightroom.adobe.com/shares/f6dbecf75b569d4c88579670314af1bd
https://lightroom.adobe.com/shares/7c24db696735634c9f4c5dc4b5f490bd
https://lightroom.adobe.com/shares/da9830762b894b4fa82e2d01eeaf9d1b
https://lightroom.adobe.com/shares/d1e33138732aa846af68a359cd7bbc2d
https://lightroom.adobe.com/shares/91f80ddd4d0281429d25b45c876b098d