CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-03-19 (3)

2026-03-19 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-03-19

3 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-32737 — 10.0 — Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions. Prior to version 0.2.1, due to a mis-written Network…
  • CVE-2026-32698 — 9.1 — OpenProject is an open-source, web-based project management software. Versions prior to 16.6.9, 17.0.6, 17.1.3, and 17.2.1 are vulnerable to an SQL injection attack via a custom field's name. When that custom field was u…
  • CVE-2025-15031 — 9.1 — A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries. Specifically, the use of tarfile.extractall without path validation enables crafte…

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.