CVE-2023-22734

CVE-2023-22734 concerns an improper validation of the newsletter double opt-in in Shopware. The vulnerability arises from the newsletter route not correctly enforcing double opt-in, potentially causing inconsistencies in newsletter systems. Documents indicate the issue has been fixed in version 6...

CVE-2023-22734 Improper Input Newsletter subscription option validation in shopware

Shopware is an open source commerce platform based on Symfony Framework and Vue js. The newsletter double opt-in validation was not checked properly, and it was possible to skip the complete double opt in process. As a result operators may have inconsistencies in their newsletter systems. This...

autocode (>=1.0.0, <=1.3.1), autocode-cli (>=0.20.0, <=0.22.0) +5 more potentially affected by CVE-2018-25074 via skeemas (1.1.6)

skeemas NPM version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on skeemas and may be impacted: - autocode =1.0.0, =0.20.0, =0.19.0, =0.3.2, =1.0.0, =0.1.0, =0.5.1 Source cves: CVE-2018-25074 Source advisory: GHSA-QV66-F876-VJVR...

autocode (>=1.0.0, <=1.3.1), autocode-cli (>=0.20.0, <=0.22.0) +5 more potentially affected by CVE-2018-25074 via skeemas (1.1.6)

skeemas NPM version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on skeemas and may be impacted: - autocode =1.0.0, =0.20.0, =0.19.0, =0.3.2, =1.0.0, =0.1.0, =0.5.1 Source cves: CVE-2018-25074 Source advisory: MEND:CVE-2018-25074...

PT-2023-10815 · Unknown · Prestaul Skeemas

Name of the Vulnerable Software and Affected Versions: Prestaul skeemas affected versions not specified Description: A vulnerability was found in Prestaul skeemas and classified as problematic. This issue affects some unknown processing of the file validators/base.js. The manipulation of the...

Kibana 7.9.0 < 7.14.1 Path Traversal

According to its self-reported version number, the Kibana application running on the remote host is prior to 7.14.1. It is, therefore, affected by : - A code execution vulnerability due to an older version of js-yaml CVE-2021-22150 - An HTML Injection due to a lack of sanitization of document...

Kibana 7.14.0 HTML Injection

According to its self-reported version number, the Kibana application running on the remote host is prior to 7.14.1. It is, therefore, affected by : - A code execution vulnerability due to an older version of js-yaml CVE-2021-22150 - An HTML Injection due to a lack of sanitization of document...

Kibana 7.10.2 < 7.14.1 Code Execution

According to its self-reported version number, the Kibana application running on the remote host is prior to 7.14.1. It is, therefore, affected by : - A code execution vulnerability due to an older version of js-yaml CVE-2021-22150 - An HTML Injection due to a lack of sanitization of document...

@bahmutov/add-typescript-to-cypress (>=1.0.2, <=1.1.1), @betit/orion (>=1.0.0-beta.1, <=1.0.0-beta.6) +176 more potentially affected by CVE-2017-20165 via debug (>=3.0.0, <=3.0.1)

debug NPM version =3.0.0, =1.0.2, =1.0.0-beta.1, =1.0.0-beta.6, =2.0.1-SNAPSHOT.88, =0.0.4, =0.0.12, =1.0.1, =1.0.0, =1.0.0, =0.1.5, =2.8.0, =1.0.71, =1.0.10-14, =1.1.16 and more Source cves: CVE-2017-20165 Source advisory: OSV:GHSA-9VVW-CC9W-F27H...

debug Inefficient Regular Expression Complexity vulnerability

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

DEBIAN-CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

Design/Logic Flaw

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

CVE-2017-20165 debug-js debug node.js useColors redos

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

CVE-2017-20165 debug-js debug node.js useColors redos

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. T...

CVE-2017-20165

CVE-2017-20165 affects the debug-js package (debug up to 3.0.x). The vulnerability is in the useColors function in src/node.js, where manipulating the argument str leads to inefficient regular-expression complexity (ReDoS). A fix is available in version 3.1.0, and the patch is identified as c38a0...