@appweaver/core (>=1.0.0, <=1.4.1), @bryopsida/object-store (>=0.1.0, <=0.1.7) +11 more potentially affected by CVE-2026-18165 via @fastify/oauth2 (>=7.9.0, <=8.2.0)

@fastify/oauth2 NPM version =7.9.0, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.13.0, =1.4.30, =1.2.0, =0.0.14, =0.0.19 Source cves: CVE-2026-18165 Source advisory: SNYK:JS-FASTIFYOAUTH2-18902506...

CVE-2026-18165

creationtimestamp| type| source ---|---|--- 2026-08-15 13:48:50+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mt4st6feps2i...

EUVD-2026-18165

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-encrypted email...

CVE-2020-18165

CVE-2020-18165 affects LAOBANCMS v2.0. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Keywords" field on the page admin/info.php?shuyu. The available connected documents confirm the affected...

CVE-2011-4532

creationtimestamp| type| source ---|---|--- 2011-11-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18165...

CVE-2011-4531

creationtimestamp| type| source ---|---|--- 2011-11-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18165...

CVE-2018-18165

...

CVE-2018-18165

This CVE entry is rejected/not used; the candidate is not assigned to any issue.