2026中国·白沟国际箱包博览会开幕

yun2025

2026中国·白沟国际箱包博览会开幕

Kroki：绘图后端安全模式未覆盖全部文件读取操作

11月7日公开的漏洞记录CVE-2026-102359涉及Kroki。Kroki可将文字描述转换成图形。处理TikZ图表时，特定安全检查只拦截了一种文件读取方式，排版引擎还有其他读取操作可用。向绘图接口提交的内容因此可能接触服务器上的文件，即使部署者已经启用了预期用于隔离输入的安全模式。版本清单标出的受影响范围包括低于0.31.2。

这条记录给出的CVSS 3.1基础评分为7.5分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、无、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://lightroom.adobe.com/shares/3ad058ec29f1c24d87b713867f192cdf
https://lightroom.adobe.com/shares/233e105939f9284da296cc0d70caf419
https://lightroom.adobe.com/shares/63e64121ff06f74d91eca6a7f6b24c93
https://lightroom.adobe.com/shares/f802a6b5fc04814f9404a2198ad50a06
https://lightroom.adobe.com/shares/0aff7cde5b237c46af066876f4377a9b
https://lightroom.adobe.com/shares/4d68c109cf66c6468c0b0f3d95245da9
https://lightroom.adobe.com/shares/5303012655574543aea427d5d0b02799
https://lightroom.adobe.com/shares/cec95ef5f3774b4eba845420e76fad66
https://lightroom.adobe.com/shares/4fd1ca48000e1440b5f53d553eb37d1f
https://lightroom.adobe.com/shares/44966c47f605534082ab35aa17294666
https://lightroom.adobe.com/shares/a6c7842bfcc4864ab9e03b23725fb898
https://lightroom.adobe.com/shares/5e9cf5e7548a584e82ea033b16a02a8d
https://lightroom.adobe.com/shares/34e14ce19a2a4f4782317cead89e5c47
https://lightroom.adobe.com/shares/11a1f5b874e16b4f8df572968eaf3dd5
https://lightroom.adobe.com/shares/ecf02d717b9bef409d0cd609aff2a52e
https://lightroom.adobe.com/shares/b867519a80b741488e22692d27c5ca96
https://lightroom.adobe.com/shares/31fdd5230978d84b94ba5fb21f8c8e46
https://lightroom.adobe.com/shares/b5c4d282f55a3341b8ce7c1796f0b299
https://lightroom.adobe.com/shares/63c5038356e45948bdf46f06fbf74477
https://lightroom.adobe.com/shares/5e18ef439bbd774abd505db990b8b321
https://lightroom.adobe.com/shares/61820a7bc8e6a24aac34f8974cff8e56
https://lightroom.adobe.com/shares/e03323770369b44a81fcb0246c24dce8
https://lightroom.adobe.com/shares/40e301c227c94d4abfd2ff50dd019f49
https://lightroom.adobe.com/shares/e8950b1aef852942b21cf5c7bfdeee57
https://lightroom.adobe.com/shares/9ae7a4531e693d46b53da0f15a06eed5
https://lightroom.adobe.com/shares/3fc0f5b3b19c32479e61b0ff13d02207
https://lightroom.adobe.com/shares/ee9dc930c3e0804fb42d03304744279a
https://lightroom.adobe.com/shares/9d967d683b26a6429890b769990e0271
https://lightroom.adobe.com/shares/58673ed8912d2548bb475feaec709d1d
https://lightroom.adobe.com/shares/08a0d28fb6d2c944a3157021ff850a41
https://lightroom.adobe.com/shares/8caf1e2d4b49bc40be5bf88d544fae13
https://lightroom.adobe.com/shares/5885890bd3c797458d7169b976993125
https://lightroom.adobe.com/shares/3d1c908987390e4d838aea8820328ff5
https://lightroom.adobe.com/shares/cae8236ff0bb39489bafb66ab7473f46
https://lightroom.adobe.com/shares/63e4207cb9ce9a4b9ae977b3ad3754ad
https://lightroom.adobe.com/shares/5f13edb25935954e819a0b16d3cc0f70
https://lightroom.adobe.com/shares/93dad8770068794c8314fa9e0f8c7759
https://lightroom.adobe.com/shares/79aa41bea078654f9239d9a8d63e0995
https://lightroom.adobe.com/shares/c5cdee4b4f4f5845a2309439574f80ed
https://lightroom.adobe.com/shares/baa899c6f65e71479d2bf2c5ca5c6b7c
https://lightroom.adobe.com/shares/93f7f06655102a4f97173c130b65a8f3
https://lightroom.adobe.com/shares/9fdc0b70379473409609258623a16b1c
https://lightroom.adobe.com/shares/bf96bcad81ec0e4ca1955665a94c4f7d
https://lightroom.adobe.com/shares/4b574856471ee64aa16be5746a951b12
https://lightroom.adobe.com/shares/46b4162809f50e4d951ef0b049f9f125
https://lightroom.adobe.com/shares/6b42f2dcf24aac46b03f815bffc4ecdb
https://lightroom.adobe.com/shares/89d1b6f0761d6a4695b8e208115ac61c
https://lightroom.adobe.com/shares/45dd341124639448b6cb8f6f96e04641
https://lightroom.adobe.com/shares/61c62c9d223c9745a826f26e568da412
https://lightroom.adobe.com/shares/8f73e827305d014baeeb275272570917