CVE-2026-85268

A Cross-Site Scripting XSS CWE-79 vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase Authentication versions prior to 2026-08-14 on iOS allows an unauthenticated remote attacker to execute arbitrary JavaScript using a malicious iOS bundle ID...

CVE-2025-61319

CVE-2025-61319: Stored XSS in ReNgine 2. After scan completion, open the Vulnerabilities tab in ReNgine and view results. 3. The payload executes in the admin's browser context. Affected versions ReNgine = 2.2.0 Remediation Sanitize and escape user-supplied input before rendering scan results...

CLEANSTART-2026-CA96304 When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression

CVE-2026-94448 affects multiple packages. When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. See references for individual vulnerability details...

CLEANSTART-2026-HS80438 KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web

Security vulnerability affects the renovate package. KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web...

CLEANSTART-2026-TW49486 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Security vulnerability affects the renovate package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...

CLEANSTART-2026-YS65548 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Security vulnerability affects the renovate package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...

CLEANSTART-2026-KL52798 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Security vulnerability affects the renovate package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...

CLEANSTART-2026-UM30043 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Security vulnerability affects the renovate package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...

CVE-2025-61454

🛡️ CVE Disclosure: CVE-2025-61454 — Reflected XSS in E-commerce Project Disclosure Date: 14 October 2025 CVE ID: CVE-2025-61454 Severity: MEDIUM CVSS 6.1 🧩 Summary A reflected Cross-Site Scripting XSS vulnerability exists in the E-commerce Project v1.0, specifically within the search.php endpoint...

CLEANSTART-2026-SL86123 protobufjs compiles protobuf definitions into JavaScript (JS) functions

Security vulnerability affects the renovate package. protobufjs compiles protobuf definitions into JavaScript JS functions...

CLEANSTART-2026-QT32731 protobufjs compiles protobuf definitions into JavaScript (JS) functions

Security vulnerability affects the renovate package. protobufjs compiles protobuf definitions into JavaScript JS functions...

CLEANSTART-2026-GW41768 adm-zip is a JavaScript library for creating and extracting ZIP archives in Node

Security vulnerability affects the renovate package. adm-zip is a JavaScript library for creating and extracting ZIP archives in Node...

CLEANSTART-2026-UF90597 adm-zip is a JavaScript library for creating and extracting ZIP archives in Node

Security vulnerability affects the renovate package. adm-zip is a JavaScript library for creating and extracting ZIP archives in Node...

CLEANSTART-2026-BZ86229 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Security vulnerability affects the renovate package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...

CLEANSTART-2026-ZY80781 Picomatch is a glob matcher written JavaScript

CVE-2026-33671 affects multiple packages. Picomatch is a glob matcher written JavaScript. See references for individual vulnerability details...

CLEANSTART-2026-JG81275 Serialize JavaScript to a superset of JSON that includes regular expressions and functions

Security vulnerability affects the argo-workflows package. Serialize JavaScript to a superset of JSON that includes regular expressions and functions...

CVE-2025-54589

CVE-2025-54589 – Copyparty Reflected XSS Author: Byte Reaper Description : This repository provides a Proof-of-Concept PoC and simple exploit for CVE-2025-54589 , a reflected Cross-Site Scripting XSS vulnerability in Copyparty ≤ 1.18.6. By injecting crafted JavaScript payloads into the filter...

Security Bulletin: A vulnerability affects IBM Decision Optimization for Cloud Pak for Data.

Summary A vulnerability has been addressed in IBM Decision Optimization for Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-73231 DESCRIPTION: Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in...

cve-2024-21683-rce

cve-2024-21683-rce CVE-2024-21683 is a critical remote code execution RCE vulnerability affecting Atlassian's Confluence Server and Data Center. This vulnerability has a CVSS score of 8.3, placing it in the high-severity category. Attackers can exploit this vulnerability to execute remote code by...

CLEANSTART-2026-ML26546 When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression

CVE-2026-94448 affects multiple packages. When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. See references for individual vulnerability details...