64 matches found
CGA-4867-5PW8-564G
Bulletin has no description...
Security Bulletin:Catastrophic Backtracking Vulnerability in path-to-regexp with Three or More Parameters
Summary Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period .. For example, /:a-:b-:c or /:a-:b-:c-:d. The backtrack protection added in [email protected] only prevents ambiguity for two...
CVE-2024-4867
The WSO2 API Manager developer portal accepts user-supplied input without enforcing expected validation constraints or proper output encoding. This deficiency allows a malicious actor to inject script content that is executed within the context of a user's browser. By leveraging this cross-site...
Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in path-to-regexp
Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in path-to-regexp. CVE-2026-4867 The vulnerability have been addressed. Vulnerability Details CVEID:CVE-2026-4867 DESCRIPTION: Impact: A bad regular expression is generated any time...
Security Bulletin: There is a vulnerability in path-to-regexp-0.1.12.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-4867)
Summary There is a vulnerability in path-to-regexp-0.1.12.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2026-4867 DESCRIPTION: Impact: A bad regular expression is generated any time you have three or more parameters within a single...
Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the path-to-regexp package
Summary Due to use of the path-to-regexp package, DevOps Test Performance and Rational Performance Tester contain a potential Regular Expression Denial of Service ReDoS vulnerability. Vulnerability Details CVEID:CVE-2026-4867 DESCRIPTION: Impact: A bad regular expression is generated any time you...
CVE-2024-4867
creationtimestamp| type| source ---|---|--- 2026-04-16 14:16:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjmlx47bla2q...
CVE-2026-4867 vulnerabilities
Vulnerabilities for packages: langfuse-fips, pelias-api, py3-captum, gitlab-rails-ce, kubeflow-centraldashboard, gitlab-rails-ce-fips, kubescape-grype-offline-db, thingsboard-fips, langfuse, wazuh-dashboard-fips, wazuh-dashboard, arangodb, kubeflow-pipelines, argo-workflows, sqlpad, kubeflow-kati...
CVE-2026-4867 vulnerabilities
Vulnerabilities for packages: sqlpad, kubeflow-pipelines, json-server, argo-workflows, kubeflow-centraldashboard, kubeflow-katib...
CVE-2026-4867
A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by crafting a malicious URL with three or more parameters in a single segment, separated by non-period characters. This causes the component to generate a bad regular expression, leading to catastrophic...
CVE-2026-4867 path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters
Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period .. For example, /:a-:b-:c or /:a-:b-:c-:d. The backtrack protection added in [email protected] only prevents ambiguity for two...
CVE-2026-4867
CVE-2026-4867 affects the path-to-regexp library. When three or more parameters occur within a single segment (e.g., /:a-:b-:c or /:a-:b-:c-:d) a bad regular expression is generated, and the backtrack protection added in [email protected] only guards two parameters. As a result, lookaheads ca...
CVE-2026-4867
creationtimestamp| type| source ---|---|--- 2026-03-26 16:03:27+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mhxy56xqkc27 2026-03-26 22:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhym5fbmva2x 2026-04-17 03:37:07+00:00| seen|...
MINI-R5X8-HHFX-4867
Bulletin has no description...
MINI-V7MG-4867-PV2X
Bulletin has no description...
CVE-2022-4867
Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
CVE-2012-4867
Directory traversal vulnerability in modules/comvtigerworkflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote attackers to read arbitrary files via a .. dot dot in the modulename parameter...
CVE-2013-4867
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...
CVE-2025-4867
A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as problematic. Affected by this vulnerability is the function formArpNerworkSet of the file /goform/ArpNerworkSet. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been...
CVE-2025-4867
A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as problematic. Affected by this vulnerability is the function formArpNerworkSet of the file /goform/ArpNerworkSet. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been...