Hims & Hers股价上涨2.6% 此前礼来将在该公司平台上销售其减肥药

yun2026

Hims & Hers股价上涨2.6% 此前礼来将在该公司平台上销售其减肥药

Kroki：绘图后端安全模式未覆盖全部文件读取操作

11月7日公开的漏洞记录CVE-2026-102359涉及Kroki。Kroki可将文字描述转换成图形。处理TikZ图表时，特定安全检查只拦截了一种文件读取方式，排版引擎还有其他读取操作可用。向绘图接口提交的内容因此可能接触服务器上的文件，即使部署者已经启用了预期用于隔离输入的安全模式。版本清单标出的受影响范围包括低于0.31.2。

这条记录给出的CVSS 3.1基础评分为7.5分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、无、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU4ODM1NDc1Ng==.html
https://v.youku.com/v_show/id_XNjU4ODM1NjM3Ng==.html
https://v.youku.com/v_show/id_XNjU4ODM1NjM3Mg==.html
https://v.youku.com/v_show/id_XNjU4ODM1MzMyOA==.html
https://v.youku.com/v_show/id_XNjU4ODM1MzMyNA==.html
https://v.youku.com/v_show/id_XNjU3ODY2OTU0OA==.html
https://v.youku.com/v_show/id_XNjU3ODY3Mzc2NA==.html
https://v.youku.com/v_show/id_XNjU4ODM1NjE5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODY3MDk5Mg==.html
https://v.youku.com/v_show/id_XNjU4ODM0ODY2OA==.html
https://v.youku.com/v_show/id_XNjU4ODM0ODY2MA==.html
https://v.youku.com/v_show/id_XNjU4ODM1Mjk2MA==.html
https://v.youku.com/v_show/id_XNjU3ODY2Nzk2MA==.html
https://v.youku.com/v_show/id_XNjU3ODY2Nzk0MA==.html
https://v.youku.com/v_show/id_XNjU4ODM0NzA0OA==.html
https://v.youku.com/v_show/id_XNjU4ODM0Njg3Ng==.html
https://v.youku.com/v_show/id_XNjU4ODM0Njg1Ng==.html
https://v.youku.com/v_show/id_XNjU4ODM0NTE3Ng==.html
https://v.youku.com/v_show/id_XNjU4ODM0ODI4MA==.html
https://v.youku.com/v_show/id_XNjU3ODY2ODg2MA==.html
https://v.youku.com/v_show/id_XNjU3ODY2MzEzMg==.html
https://v.youku.com/v_show/id_XNjU3ODY2NTkzMg==.html
https://v.youku.com/v_show/id_XNjU4ODM0ODAxMg==.html
https://v.youku.com/v_show/id_XNjU3ODY1OTkxNg==.html
https://v.youku.com/v_show/id_XNjU3ODY2Mjg2OA==.html
https://v.youku.com/v_show/id_XNjU4ODM0MTg2MA==.html
https://v.youku.com/v_show/id_XNjU3ODY1OTg1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODY1OTg0OA==.html
https://v.youku.com/v_show/id_XNjU3ODY1OTgzNg==.html
https://v.youku.com/v_show/id_XNjU3ODY2Mjc4OA==.html
https://v.youku.com/v_show/id_XNjU4ODM0MTY5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODY2MTA5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODY2MTA4OA==.html
https://v.youku.com/v_show/id_XNjU3ODY2MTA4NA==.html
https://v.youku.com/v_show/id_XNjU4ODMzNzMyMA==.html
https://v.youku.com/v_show/id_XNjU3ODY1Nzk1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODY1Nzk0NA==.html
https://v.youku.com/v_show/id_XNjU3ODY1NTAwNA==.html
https://v.youku.com/v_show/id_XNjU3ODY1Nzc4OA==.html
https://v.youku.com/v_show/id_XNjU3ODY1Nzc4NA==.html
https://v.youku.com/v_show/id_XNjU4ODMzODQ3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODY1Nzc2MA==.html
https://v.youku.com/v_show/id_XNjU4ODMzODQ2OA==.html
https://v.youku.com/v_show/id_XNjU3ODY1NjI4OA==.html
https://v.youku.com/v_show/id_XNjU4ODMzMjYwMA==.html
https://v.youku.com/v_show/id_XNjU4ODMzNDA1Mg==.html
https://v.youku.com/v_show/id_XNjU4ODMzMTA4MA==.html
https://v.youku.com/v_show/id_XNjU3ODY1MzQ2NA==.html
https://v.youku.com/v_show/id_XNjU3ODY1MTk2NA==.html
https://v.youku.com/v_show/id_XNjU4ODMzMzk4NA==.html