Advisory Catalog

ggit is vulnerable to Command Injection via the fetchTags(branch) API

Saltcorn Server allows logged-in users to delete arbitrary files because of a path traversal vulnerability

Parse Server's custom object ID allows to acquire role privileges

@saltcorn/plugins-loader unsanitized plugin name leads to a remote code execution (RCE) vulnerability when creating plugins using git source

@saltcorn/server Remote Code Execution (RCE) / SQL injection via prototype pollution by manipulating `lang` and `defstring` parameters when setting localizer strings

uPlot Prototype Pollution vulnerability

basic-auth-connect's callback uses time unsafe string comparison

Remote command execution in promptr

Heap-based Buffer Overflow in sqlite-vec

Denial of service in rocket chat message parser

DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS

lobe-chat implemented an insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)

Plate allows arbitrary DOM attributes in element.attributes and leaf.attributes

find-my-way has a ReDoS vulnerability in multiparametric routes

Next.js Cache Poisoning

@backstage/plugin-techdocs-backend storage bucket Directory Traversal vulnerability

@backstage/plugin-catalog-backend Prototype Pollution vulnerability

DOMPurify allows tampering by prototype pollution

Mattermost Desktop App Uncontrolled Search Path Vulnerability

Withdrawn Advisory: Lunary Cross-Site Request Forgery (CSRF) vulnerability

Withdrawn Advisory: Lunary Improper Authentication vulnerability

Withdrawn Advisory: Lunary improper access control vulnerability

dset Prototype Pollution vulnerability

Session is cached for OpenID and OAuth2 if `redirect` is not used

body-parser vulnerable to denial of service when url encoding is enabled

node-gettext vulnerable to Prototype Pollution

path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters

Tina search token leak via lock file in TinaCMS

@actions/artifact has an Arbitrary File Write via artifact extraction

Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries

Flowise Unauthenticated Denial of Service (DoS) vulnerability

Flowise Authentication Bypass vulnerability

unzip-stream allows Arbitrary File Write via artifact extraction

gettext.js has a Cross-site Scripting injection

webcrack has an Arbitrary File Write Vulnerability on Windows when Parsing and Saving a Malicious Bundle

Server-Side Request Forgery in axios

Nuxt Icon affected by a Server-Side Request Forgery (SSRF)

Nuxt Devtools has a Path Traversal: '../filedir'

Rocket.Chat Server-Side Request Forgery (SSRF) vulnerability

fast-xml-parser vulnerable to ReDOS at currency parsing

(ReDoS) Regular Expression Denial of Service in tf2-item-format

Plate media plugins has a XSS in media embed element when using custom URL parsers

Next.js Denial of Service (DoS) condition

speaker vulnerable to Denial of Service

node-twain vulnerable to Improper Check or Handling of Exceptional Conditions

images vulnerable to Denial of Service

audify vulnerable to Improper Validation of Array Index

@discordjs/opus vulnerable to Denial of Service

electron-updater Code Signing Bypass on Windows

Directus Allows Single Sign-On User Enumeration