375184 matches found
@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107723 via fast-jwt (>=6.0.0, <=6.2.4)
fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107723 Source advisory: OSV:GHSA-5HJW-83FP-PHQ9...
@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2025-30144 +1 more via fast-jwt (>=6.0.0, <=6.2.4)
fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2025-30144, CVE-2026-107723 Source advisory: GHSA-5HJW-83FP-PHQ9...
@jsprismarine/client (>=0.13.5-unstable-20260512190500, <=0.14.1), @jsprismarine/prismarine (>=0.13.5-unstable-20260512190500, <=0.14.1) +1 more potentially affected by CVE-2026-107724 via fast-jwt (6.2.4)
fast-jwt NPM version 6.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-jwt and may be impacted: - @jsprismarine/client =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.14.1 Source cves:...
@jsprismarine/client (>=0.13.5-unstable-20260512190500, <=0.14.1), @jsprismarine/prismarine (>=0.13.5-unstable-20260512190500, <=0.14.1) +1 more potentially affected by CVE-2026-107724 via fast-jwt (6.2.4)
fast-jwt NPM version 6.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-jwt and may be impacted: - @jsprismarine/client =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.14.1 Source cves:...
@jsprismarine/client (>=0.13.5-unstable-20260512190500, <=0.14.1), @jsprismarine/prismarine (>=0.13.5-unstable-20260512190500, <=0.14.1) +1 more potentially affected by CVE-2026-107724 via fast-jwt (6.2.4)
fast-jwt NPM version 6.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-jwt and may be impacted: - @jsprismarine/client =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.14.1 Source cves:...
@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107724 via fast-jwt (>=6.0.0, <=6.2.4)
fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107724 Source advisory: MEND:CVE-2026-107724...
@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107723 via fast-jwt (>=6.0.0, <=6.2.4)
fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107723 Source advisory: MEND:CVE-2026-107723...
@jsprismarine/client (>=0.13.5-unstable-20260512190500, <=0.14.1), @jsprismarine/prismarine (>=0.13.5-unstable-20260512190500, <=0.14.1) +1 more potentially affected by CVE-2026-107722 via fast-jwt (6.2.4)
fast-jwt NPM version 6.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-jwt and may be impacted: - @jsprismarine/client =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.14.1 Source cves:...
@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107721 via fast-jwt (>=6.0.0, <=6.2.4)
fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107721 Source advisory: MEND:CVE-2026-107721...
@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107720 via fast-jwt (>=6.0.0, <=6.2.4)
fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107720 Source advisory: MEND:CVE-2026-107720...
CVE-2026-107718
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL helper used by Router.makeUrl and Response.redirect.toRoute. If an...
CVE-2026-107718 AdonisJS: Unencoded route parameters can produce open redirects
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL helper used by Router.makeUrl and Response.redirect.toRoute. If an...
CVE-2026-107718 AdonisJS: Unencoded route parameters can produce open redirects
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL helper used by Router.makeUrl and Response.redirect.toRoute. If an...
EUVD-2026-95342
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL helper used by Router.makeUrl and Response.redirect.toRoute. If an...
CVE-2026-107718
The AdonisJS HTTP Server package is vulnerable to open redirects in versions prior to 8.2.3 and 9.3.0 . The root cause is the failure to use encodeURIComponent within the shared createURL() helper, which is utilized by Router.makeUrl() and Response.redirect().toRoute(). If an application includes...
Exploit for Path Traversal in Apache Http_Server
Apache HTTP Server 2.4.50 Path Traversal and RCE CVE-2021-420...
Server-Side Template Injection
Handlebars is vulnerable to Server-Side Template Injection SSTI. The vulnerability is due to improper enforcement of prototype-access restrictions in lookupProperty, which allows an attacker to bypass the deny list, access the Function constructor through a controlled template, and execute...
GHSA-477H-4R7F-FVRX vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, nextcloud-server, commercial-gitlab-rails-ee, wazuh-dashboard, gitlab-rails-ce, wazuh-dashboard-fips...
CVE-2026-102414 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, nextcloud-server, commercial-gitlab-rails-ee, wazuh-dashboard, gitlab-rails-ce, wazuh-dashboard-fips...
