虚拟货币主要发行平台Solana高调“入沪”被紧急叫停 人民银行有关司局回应

yun2025

虚拟货币主要发行平台Solana高调“入沪”被紧急叫停 人民银行有关司局回应

Kroki：绘图后端安全模式未覆盖全部文件读取操作

11月7日公开的漏洞记录CVE-2026-102359涉及Kroki。Kroki可将文字描述转换成图形。处理TikZ图表时，特定安全检查只拦截了一种文件读取方式，排版引擎还有其他读取操作可用。向绘图接口提交的内容因此可能接触服务器上的文件，即使部署者已经启用了预期用于隔离输入的安全模式。版本清单标出的受影响范围包括低于0.31.2。

这条记录给出的CVSS 3.1基础评分为7.5分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、无、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU3OTIxOTk2OA==.html
https://v.youku.com/v_show/id_XNjU3OTIyNTg3Ng==.html
https://v.youku.com/v_show/id_XNjU3OTIyNDI4OA==.html
https://v.youku.com/v_show/id_XNjU3OTIyMTE0MA==.html
https://v.youku.com/v_show/id_XNjU3OTIyNzI2NA==.html
https://v.youku.com/v_show/id_XNjU3OTIyNTY2NA==.html
https://v.youku.com/v_show/id_XNjU3OTIyMjYyNA==.html
https://v.youku.com/v_show/id_XNjU3OTIyNzIyNA==.html
https://v.youku.com/v_show/id_XNjU3OTIxNTExMg==.html
https://v.youku.com/v_show/id_XNjU3OTIxNjY4OA==.html
https://v.youku.com/v_show/id_XNjU4ODg5NzU5Ng==.html
https://v.youku.com/v_show/id_XNjU3OTIxNTA4MA==.html
https://v.youku.com/v_show/id_XNjU3OTIxNDkzMg==.html
https://v.youku.com/v_show/id_XNjU3OTIxODEyOA==.html
https://v.youku.com/v_show/id_XNjU4ODg5NTY2MA==.html
https://v.youku.com/v_show/id_XNjU3OTIxNjQyMA==.html
https://v.youku.com/v_show/id_XNjU3OTIxMTk5Mg==.html
https://v.youku.com/v_show/id_XNjU3OTIxMTk4MA==.html
https://v.youku.com/v_show/id_XNjU3OTIxMTg2OA==.html
https://v.youku.com/v_show/id_XNjU3OTIxMzIxMg==.html
https://v.youku.com/v_show/id_XNjU4ODg5ODcwOA==.html
https://v.youku.com/v_show/id_XNjU4ODg5NzAxMg==.html
https://v.youku.com/v_show/id_XNjU3OTIxNjEyOA==.html
https://v.youku.com/v_show/id_XNjU4ODg5NjkyNA==.html
https://v.youku.com/v_show/id_XNjU3OTIxNjAxNg==.html
https://v.youku.com/v_show/id_XNjU3OTIxMDM2MA==.html
https://v.youku.com/v_show/id_XNjU3OTIxNDQyNA==.html
https://v.youku.com/v_show/id_XNjU3OTIxNjAwNA==.html
https://v.youku.com/v_show/id_XNjU3OTIxMDIyNA==.html
https://v.youku.com/v_show/id_XNjU4ODg5MzcyMA==.html
https://v.youku.com/v_show/id_XNjU4ODg4Nzk3Ng==.html
https://v.youku.com/v_show/id_XNjU3OTIxMDIwMA==.html
https://v.youku.com/v_show/id_XNjU3OTIxMjg0OA==.html
https://v.youku.com/v_show/id_XNjU3OTIxMTQxMg==.html
https://v.youku.com/v_show/id_XNjU3OTIxMTI3Ng==.html
https://v.youku.com/v_show/id_XNjU4ODg4NDczMg==.html
https://v.youku.com/v_show/id_XNjU4ODg4NDcyOA==.html
https://v.youku.com/v_show/id_XNjU3OTIxMTIzNg==.html
https://v.youku.com/v_show/id_XNjU3OTIwOTkxNg==.html
https://v.youku.com/v_show/id_XNjU4ODg5MDc1Ng==.html
https://v.youku.com/v_show/id_XNjU3OTIwOTkwMA==.html
https://v.youku.com/v_show/id_XNjU4ODg4NjAxNg==.html
https://v.youku.com/v_show/id_XNjU3OTIwNjk3Mg==.html
https://v.youku.com/v_show/id_XNjU4ODg4MzAzNg==.html
https://v.youku.com/v_show/id_XNjU4ODg4NzQ1Ng==.html
https://v.youku.com/v_show/id_XNjU4ODg4MzAwOA==.html
https://v.youku.com/v_show/id_XNjU4ODg5MDU4MA==.html
https://v.youku.com/v_show/id_XNjU3OTIwOTczMg==.html
https://v.youku.com/v_show/id_XNjU4ODg5MDUyNA==.html
https://v.youku.com/v_show/id_XNjU4ODg4NDQwNA==.html