4336 matches found
CVE-2026-91165: Improper Neutralization of Input During Web Page Generation
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.27.6, the responsemode=formpost SSO return path in warpgate-protocol-http/src/api/ssoproviderlist.rs uses serdejson::tostring inside ReturnToSsoPostResponse without neutralizing a script-closing sequence. The...
PT-2026-96213
Name of the Vulnerable Software and Affected Versions Warpgate versions prior to 0.25.5 Description The software fails to properly escape the next parameter stored via the '/@warpgate/api/sso/providers/:name/start' endpoint. This value is subsequently inserted without HTML escaping into the...
PT-2026-96224
Name of the Vulnerable Software and Affected Versions Warpgate versions prior to 0.27.6 Description The SSO return path using response mode=form post in the warpgate-protocol-http/src/api/sso provider list.rs file fails to neutralize script-closing sequences when using serde json::to string insid...
ROOT-APP-NPM-CVE-2026-64642 CVE-2026-64642 in next - Patched by Root
Root has patched CVE-2026-64642 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-32421 CVE-2025-32421 in next - Patched by Root
Root has patched CVE-2025-32421 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-56332 CVE-2024-56332 in next - Patched by Root
Root has patched CVE-2024-56332 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-39693 CVE-2024-39693 in next - Patched by Root
Root has patched CVE-2024-39693 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-34350 CVE-2024-34350 in next - Patched by Root
Root has patched CVE-2024-34350 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-48068 CVE-2025-48068 in next - Patched by Root
Root has patched CVE-2025-48068 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-23646 CVE-2022-23646 in next - Patched by Root
Root has patched CVE-2022-23646 in the next package for Root:npm. Multiple fixed versions available...
Malicious Package
Overview link-next is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
CVE-2026-87742
A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...
NPM: Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site
NPM: Tina: Broken Access Control letting any TinaCloud user authorize against any self-hosted site vulnerability discovered by ? in WordPress Npm next-tinacms-azure versions = 15.0.0...
EUVD-2026-81675
A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...
CVE-2026-87742
A flaw in quarkus-websockets-next allows a remote attacker to trigger a Denial of Service by streaming messages over a single connection faster than the application can process them. The root cause is unbounded message buffering combined with a lack of read backpressure , which rapidly exhausts h...
CVE-2026-87742 Quarkus-websockets-next: denial of service (oom) in quarkus-websockets-next via unbounded message buffering
A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...
CVE-2026-87742 Quarkus-websockets-next: denial of service (oom) in quarkus-websockets-next via unbounded message buffering
A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...
CVE-2026-87742
A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...