Lucene search
+L

375207 matches found

vulnersOsv
vulnersOsv
•added 2026/10/08 10:02 p.m.•3 views

@jsprismarine/client (>=0.13.5-unstable-20260512190500, <=0.14.1), @jsprismarine/prismarine (>=0.13.5-unstable-20260512190500, <=0.14.1) +1 more potentially affected by CVE-2026-107722 via fast-jwt (6.2.4)

fast-jwt NPM version 6.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-jwt and may be impacted: - @jsprismarine/client =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.14.1 Source cves:...

9.8CVSS5.8AI score0.00356EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 10:02 p.m.•4 views

@jsprismarine/client (>=0.13.5-unstable-20260512190500, <=0.14.1), @jsprismarine/prismarine (>=0.13.5-unstable-20260512190500, <=0.14.1) +1 more potentially affected by CVE-2026-107722 +1 more via fast-jwt (6.2.4)

fast-jwt NPM version 6.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-jwt and may be impacted: - @jsprismarine/client =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.14.1 Source cves:...

9.8CVSS5.8AI score0.00356EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/10/08 10:02 p.m.•4 views

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107721 via fast-jwt (>=6.0.0, <=6.2.4)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107721 Source advisory: SNYK:JS-FASTJWT-20825053...

5.9CVSS5.8AI score0.00341EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 10:02 p.m.•6 views

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107721 via fast-jwt (>=6.0.0, <=6.2.4)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107721 Source advisory: GHSA-687G-22H4-J4W4...

5.9CVSS5.8AI score0.00341EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 10:01 p.m.•3 views

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107723 via fast-jwt (>=6.0.0, <=6.2.4)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107723 Source advisory: SNYK:JS-FASTJWT-20825052...

8.1CVSS5.8AI score0.00455EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 10:01 p.m.•5 views

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107723 via fast-jwt (>=6.0.0, <=6.2.4)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107723 Source advisory: OSV:GHSA-5HJW-83FP-PHQ9...

8.1CVSS5.8AI score0.00455EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 10:01 p.m.•4 views

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2025-30144 +1 more via fast-jwt (>=6.0.0, <=6.2.4)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2025-30144, CVE-2026-107723 Source advisory: GHSA-5HJW-83FP-PHQ9...

8.1CVSS5.8AI score0.00592EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 10:01 p.m.•4 views

@jsprismarine/client (>=0.13.5-unstable-20260512190500, <=0.14.1), @jsprismarine/prismarine (>=0.13.5-unstable-20260512190500, <=0.14.1) +1 more potentially affected by CVE-2026-107724 via fast-jwt (6.2.4)

fast-jwt NPM version 6.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-jwt and may be impacted: - @jsprismarine/client =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.14.1 Source cves:...

7.4CVSS5.8AI score0.00282EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 10:01 p.m.•6 views

@jsprismarine/client (>=0.13.5-unstable-20260512190500, <=0.14.1), @jsprismarine/prismarine (>=0.13.5-unstable-20260512190500, <=0.14.1) +1 more potentially affected by CVE-2026-107724 via fast-jwt (6.2.4)

fast-jwt NPM version 6.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-jwt and may be impacted: - @jsprismarine/client =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.14.1 Source cves:...

7.4CVSS5.8AI score0.00282EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 10:01 p.m.•6 views

@jsprismarine/client (>=0.13.5-unstable-20260512190500, <=0.14.1), @jsprismarine/prismarine (>=0.13.5-unstable-20260512190500, <=0.14.1) +1 more potentially affected by CVE-2026-107724 via fast-jwt (6.2.4)

fast-jwt NPM version 6.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-jwt and may be impacted: - @jsprismarine/client =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.14.1 Source cves:...

7.4CVSS5.8AI score0.00282EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 9:53 p.m.•4 views

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107724 via fast-jwt (>=6.0.0, <=6.2.4)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107724 Source advisory: MEND:CVE-2026-107724...

7.4CVSS5.8AI score0.00282EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 9:51 p.m.•5 views

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107723 via fast-jwt (>=6.0.0, <=6.2.4)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107723 Source advisory: MEND:CVE-2026-107723...

8.1CVSS5.8AI score0.00455EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 9:49 p.m.•5 views

@jsprismarine/client (>=0.13.5-unstable-20260512190500, <=0.14.1), @jsprismarine/prismarine (>=0.13.5-unstable-20260512190500, <=0.14.1) +1 more potentially affected by CVE-2026-107722 via fast-jwt (6.2.4)

fast-jwt NPM version 6.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on fast-jwt and may be impacted: - @jsprismarine/client =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.13.5-unstable-20260512190500, =0.14.1 Source cves:...

9.8CVSS5.8AI score0.00356EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 9:45 p.m.•5 views

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107721 via fast-jwt (>=6.0.0, <=6.2.4)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107721 Source advisory: MEND:CVE-2026-107721...

5.9CVSS5.8AI score0.00341EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 9:44 p.m.•4 views

@jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.14.1), @jsprismarine/prismarine (>=0.12.2-unstable-20250320195345, <=0.14.1) +1 more potentially affected by CVE-2026-107720 via fast-jwt (>=6.0.0, <=6.2.4)

fast-jwt NPM version =6.0.0, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.1 Source cves: CVE-2026-107720 Source advisory: MEND:CVE-2026-107720...

7.4CVSS5.8AI score0.00324EPSS
SaveExploits0
Mend
Mend
•added 2026/10/08 9:39 p.m.•11 views

CVE-2026-107718

AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL helper used by Router.makeUrl and Response.redirect.toRoute. If an...

6.1CVSS5.8AI score0.00278EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/08 9:39 p.m.•50 views

CVE-2026-107718 AdonisJS: Unencoded route parameters can produce open redirects

AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL helper used by Router.makeUrl and Response.redirect.toRoute. If an...

6.1CVSS0.00278EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/10/08 9:39 p.m.•16 views

CVE-2026-107718 AdonisJS: Unencoded route parameters can produce open redirects

AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL helper used by Router.makeUrl and Response.redirect.toRoute. If an...

6.1CVSS5.9AI score
SaveExploits0References7
EUVD
EUVD
•added 2026/10/08 9:39 p.m.•12 views

EUVD-2026-95342

AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL helper used by Router.makeUrl and Response.redirect.toRoute. If an...

6.1CVSS5.8AI score0.00278EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/08 9:39 p.m.•25 views

CVE-2026-107718

The AdonisJS HTTP Server package is vulnerable to open redirects in versions prior to 8.2.3 and 9.3.0 . The root cause is the failure to use encodeURIComponent within the shared createURL() helper, which is utilized by Router.makeUrl() and Response.redirect().toRoute(). If an application includes...

6.1CVSS5.8AI score0.00278EPSS
SaveExploits0References5
Rows per page
Query Builder