英国科学家破解1600年前罗马变色玻璃之谜 成功重现古代琉璃杯的光学效果

yun2025

英国科学家破解1600年前罗马变色玻璃之谜 成功重现古代琉璃杯的光学效果

Kroki：绘图后端安全模式未覆盖全部文件读取操作

11月7日公开的漏洞记录CVE-2026-102359涉及Kroki。Kroki可将文字描述转换成图形。处理TikZ图表时，特定安全检查只拦截了一种文件读取方式，排版引擎还有其他读取操作可用。向绘图接口提交的内容因此可能接触服务器上的文件，即使部署者已经启用了预期用于隔离输入的安全模式。版本清单标出的受影响范围包括低于0.31.2。

这条记录给出的CVSS 3.1基础评分为7.5分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、无、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU4ODEzMjU2MA==.html
https://v.youku.com/v_show/id_XNjU4ODEzMjUwNA==.html
https://v.youku.com/v_show/id_XNjU4ODEzMzY4OA==.html
https://v.youku.com/v_show/id_XNjU3ODQzNDA4OA==.html
https://v.youku.com/v_show/id_XNjU3ODQzMjYxNg==.html
https://v.youku.com/v_show/id_XNjU4ODEzMjQzNg==.html
https://v.youku.com/v_show/id_XNjU3ODQzNDAxMg==.html
https://v.youku.com/v_show/id_XNjU3ODQzMjUzMg==.html
https://v.youku.com/v_show/id_XNjU3ODQyNjQwMA==.html
https://v.youku.com/v_show/id_XNjU3ODQzNTI5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODQzMjQ2OA==.html
https://v.youku.com/v_show/id_XNjU4ODEzMjI3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODQzMzkxMg==.html
https://v.youku.com/v_show/id_XNjU3ODQzMzg4OA==.html
https://v.youku.com/v_show/id_XNjU3ODQzMzg4NA==.html
https://v.youku.com/v_show/id_XNjU3ODQzMzg2OA==.html
https://v.youku.com/v_show/id_XNjU4ODEzMjE4NA==.html
https://v.youku.com/v_show/id_XNjU4ODEzMjEwOA==.html
https://v.youku.com/v_show/id_XNjU3ODQyNjIyOA==.html
https://v.youku.com/v_show/id_XNjU3ODQyNjIxNg==.html
https://v.youku.com/v_show/id_XNjU3ODQyNDY2OA==.html
https://v.youku.com/v_show/id_XNjU3ODQyNDY2NA==.html
https://v.youku.com/v_show/id_XNjU3ODQzMzczMg==.html
https://v.youku.com/v_show/id_XNjU3ODQzMzcwMA==.html
https://v.youku.com/v_show/id_XNjU3ODQzMzY4MA==.html
https://v.youku.com/v_show/id_XNjU3ODQyOTI3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODQyNDU2NA==.html
https://v.youku.com/v_show/id_XNjU3ODQzMDgzNg==.html
https://v.youku.com/v_show/id_XNjU4ODEyOTAwOA==.html
https://v.youku.com/v_show/id_XNjU3ODQyMzA2OA==.html
https://v.youku.com/v_show/id_XNjU3ODQyMzA1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODQyNzU2OA==.html
https://v.youku.com/v_show/id_XNjU3ODQyOTEyOA==.html
https://v.youku.com/v_show/id_XNjU4ODEyODkyMA==.html
https://v.youku.com/v_show/id_XNjU3ODQyMjkyOA==.html
https://v.youku.com/v_show/id_XNjU3ODQyNzQ1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODQyMjg4MA==.html
https://v.youku.com/v_show/id_XNjU3ODQyODk4NA==.html
https://v.youku.com/v_show/id_XNjU3ODQzMDYxMg==.html
https://v.youku.com/v_show/id_XNjU3ODQyNzMzMg==.html
https://v.youku.com/v_show/id_XNjU3ODQzMDUyOA==.html
https://v.youku.com/v_show/id_XNjU3ODQyMjc1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODQyNzMwNA==.html
https://v.youku.com/v_show/id_XNjU4ODEyNDcxMg==.html
https://v.youku.com/v_show/id_XNjU3ODQyODg2MA==.html
https://v.youku.com/v_show/id_XNjU4ODEyNDY1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODQyMjY1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODQyODgwNA==.html
https://v.youku.com/v_show/id_XNjU3ODQyMjY0MA==.html
https://v.youku.com/v_show/id_XNjU3ODQyNTYxMg==.html