明年停产的特斯拉 Cybertruck 又涨价，入门版已暂停接受订单

yun2026

明年停产的特斯拉 Cybertruck 又涨价，入门版已暂停接受订单

Kroki：绘图后端安全模式未覆盖全部文件读取操作

11月7日公开的漏洞记录CVE-2026-102359涉及Kroki。Kroki可将文字描述转换成图形。处理TikZ图表时，特定安全检查只拦截了一种文件读取方式，排版引擎还有其他读取操作可用。向绘图接口提交的内容因此可能接触服务器上的文件，即使部署者已经启用了预期用于隔离输入的安全模式。版本清单标出的受影响范围包括低于0.31.2。

这条记录给出的CVSS 3.1基础评分为7.5分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、无、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU3OTU2Mzk1Ng==.html
https://v.youku.com/v_show/id_XNjU4OTI2MzMzNg==.html
https://v.youku.com/v_show/id_XNjU4OTI2MzMwNA==.html
https://v.youku.com/v_show/id_XNjU3OTU2ODMwMA==.html
https://v.youku.com/v_show/id_XNjU4OTI1ODc3Ng==.html
https://v.youku.com/v_show/id_XNjU3OTU2MzgzNg==.html
https://v.youku.com/v_show/id_XNjU4OTI2MDIzNg==.html
https://v.youku.com/v_show/id_XNjU3OTU2ODE0MA==.html
https://v.youku.com/v_show/id_XNjU3OTU2MzY4NA==.html
https://v.youku.com/v_show/id_XNjU4OTI1ODYyMA==.html
https://v.youku.com/v_show/id_XNjU3OTU2MjIzMg==.html
https://v.youku.com/v_show/id_XNjU4OTI1ODU2OA==.html
https://v.youku.com/v_show/id_XNjU4OTI1ODU0OA==.html
https://v.youku.com/v_show/id_XNjU3OTU2ODA1Mg==.html
https://v.youku.com/v_show/id_XNjU3OTU2ODAxMg==.html
https://v.youku.com/v_show/id_XNjU3OTU2MDQ3Ng==.html
https://v.youku.com/v_show/id_XNjU3OTU2MzQwMA==.html
https://v.youku.com/v_show/id_XNjU3OTU2MTk3Mg==.html
https://v.youku.com/v_show/id_XNjU3OTU2MDQyNA==.html
https://v.youku.com/v_show/id_XNjU3OTU2MzM1Mg==.html
https://v.youku.com/v_show/id_XNjU3OTU2MzMyMA==.html
https://v.youku.com/v_show/id_XNjU4OTI1NDE2OA==.html
https://v.youku.com/v_show/id_XNjU4OTI1NDE1Ng==.html
https://v.youku.com/v_show/id_XNjU4OTI1NDEyMA==.html
https://v.youku.com/v_show/id_XNjU3OTU2MTczNg==.html
https://v.youku.com/v_show/id_XNjU4OTI1MTA4OA==.html
https://v.youku.com/v_show/id_XNjU3OTU1NTYxNg==.html
https://v.youku.com/v_show/id_XNjU4OTI1Njg2NA==.html
https://v.youku.com/v_show/id_XNjU4OTI1MjQ0OA==.html
https://v.youku.com/v_show/id_XNjU3OTU1NzIzNg==.html
https://v.youku.com/v_show/id_XNjU4OTI0Nzk4NA==.html
https://v.youku.com/v_show/id_XNjU3OTU1NTQ5Ng==.html
https://v.youku.com/v_show/id_XNjU3OTU1NTQ4NA==.html
https://v.youku.com/v_show/id_XNjU4OTI0Nzk1Mg==.html
https://v.youku.com/v_show/id_XNjU3OTU1NzA2MA==.html
https://v.youku.com/v_show/id_XNjU4OTI0Nzc4MA==.html
https://v.youku.com/v_show/id_XNjU4OTI1MjE2NA==.html
https://v.youku.com/v_show/id_XNjU4OTI1MjEzNg==.html
https://v.youku.com/v_show/id_XNjU4OTI1NTIyNA==.html
https://v.youku.com/v_show/id_XNjU4OTI0Nzc0MA==.html
https://v.youku.com/v_show/id_XNjU3OTU1NTI4OA==.html
https://v.youku.com/v_show/id_XNjU4OTI0NDc1Mg==.html
https://v.youku.com/v_show/id_XNjU4OTI0NzY4MA==.html
https://v.youku.com/v_show/id_XNjU4OTI0NDcxMg==.html
https://v.youku.com/v_show/id_XNjU4OTI0OTA5Ng==.html
https://v.youku.com/v_show/id_XNjU4OTI1MDUyMA==.html
https://v.youku.com/v_show/id_XNjU4OTI0NTk1Mg==.html
https://v.youku.com/v_show/id_XNjU4OTI0MjkwMA==.html
https://v.youku.com/v_show/id_XNjU4OTI0NTkxMg==.html
https://v.youku.com/v_show/id_XNjU4OTI0ODkzMg==.html