Unverified50% confidenceFactExact time
Dirty Pipe（CVE-2022-0847）于2022年披露，允许本地用户向任意只读文件写入数据
1
Sources
50%
Confidence
Long-term
Relevance
7/12/2026
First Seen
Sources
GhostLock: A Deep Dive into the 15-Year-Old Linux Stack UAF Vulnerability
hackernewshackernews7/10/2026
Related Claims
Unverified建议使用pip freeze或poetry.lock锁定依赖版本，并借助pip-audit或dependabot定期扫描已知漏洞58% similarUnverifiedPantsdown（CVE-2019-6260）漏洞允许通过网络未经认证直接读写BMC物理内存55% similarUnverifiedThe recommended minimal security configuration for Hooks includes: blocking reads/writes to sensitive files such as .env and secrets, intercepting high-risk commands (rm -rf, drop database, etc.), automatically formatting code after changes, and requiring confirmation before modifying critical files.53% similarUnverifiedThe update includes security hardening against CVE-2026-1839, a class of remote code execution vulnerabilities targeting model files in the pickle serialization format.51% similarUnverifiedCVE-2026-55040 allows an attacker to achieve remote code execution as an arbitrary user without authentication.51% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/489567API
curl https://kongchang.com/api/v1/knowledge/claims/489567MCP
get_claim(id=489567)