CVE-2026-52809

Gogs is an open source self-hosted Git service. Prior to 0.14.3, password-reset tokens are generated using conf.Auth.ActivateCodeLives the account-activation lifetime, not conf.Auth.ResetPasswordCodeLives. The token lifetime is baked into the token itself at generation time and is re-extracted fr...

CVE-2026-52809

Gogs is an open source self-hosted Git service. Prior to 0.14.3, password-reset tokens are generated using conf.Auth.ActivateCodeLives the account-activation lifetime, not conf.Auth.ResetPasswordCodeLives. The token lifetime is baked into the token itself at generation time and is re-extracted fr...

CVE-2026-52809

creationtimestamp| type| source ---|---|--- 2026-06-19 02:19:01+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-5c3f-6486-3g7g...

MiracleLinux 9 : kernel-5.14.0-427.28.1.el9_4 (AXSA:2024-8642:23)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8642:23 advisory. kernel: block: null pointer dereference in ioctl.c when length and logical block size are misaligned CVE-2023-52458 kernel: ext4: avoid allocating...

EUVD-2025-52809

Malicious code in past-blue-hippopotamus npm...

CVE-2023-52809

creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-15...

CVE-2025-52809

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in John Russell National Weather Service Alerts national-weather-service-alerts allows PHP Local File Inclusion.This issue affects National Weather Service Alerts: from n/a through ...

CVE-2025-52809

creationtimestamp| type| source ---|---|--- 2025-06-27 14:51:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19722...

CVE-2025-52809 WordPress National Weather Service Alerts plugin <= 1.3.5 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in John Russell National Weather Service Alerts national-weather-service-alerts allows PHP Local File Inclusion.This issue affects National Weather Service Alerts: from n/a through ...

CVE-2024-52809

vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to createI18n or useI18n. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in versions...

Linux Distros Unpatched Vulnerability : CVE-2023-52809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libfc: Fix potential NULL pointer dereference in fclportptpsetup fclportptpsetup did not check the return value of fcrportcreate which can return NULL and...

@actindo/core-ui (>=0.0.12, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +182 more potentially affected by CVE-2024-52809 via @intlify/core-base (>=9.3.0, <=9.14.1)

@intlify/core-base NPM version =9.3.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.1-beta.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =8.2.2, =9.0.4 - @delfinjs/shared-vue 1.0.0 - @directus-labs/flow-trigger-bundle 1.0.0 - @dispatchable/metronic-vue 1.0.0 and more Source cves: CVE-2024-52809 Source...

@actindo/core-ui (>=0.0.12, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +129 more potentially affected by CVE-2024-52809 via vue-i18n (>=9.3.0, <=9.14.1)

vue-i18n NPM version =9.3.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.1-beta.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =8.2.2, =9.0.4 - @delfinjs/shared-vue 1.0.0 - @directus-labs/flow-trigger-bundle 1.0.0 - @dispatchable/metronic-vue 1.0.0 and more Source cves: CVE-2024-52809 Source advisory:...

@acronis-platform/ui-component-library (1.33.0), @nhealth/app (>=0.0.16, <=0.0.20) +25 more potentially affected by CVE-2024-52809 via vue-i18n (>=10.0.0, <=10.0.4)

vue-i18n NPM version =10.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.12.0 - @xwiki/cristal-file-preview-ui 0.12.0 and more Source cves: CVE-2024-52809 Source advisory: GHSA-9R9M-FFP6-9X4V...

@acronis-platform/ui-component-library (1.33.0), @intlify/core (>=10.0.0, <=10.0.4) +30 more potentially affected by CVE-2024-52809 via @intlify/core-base (>=10.0.0, <=10.0.4)

@intlify/core-base NPM version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves: CVE-2024-52809 Source advisory: OSV:GHSA-9R9M-FFP6-9X4V...

@actindo/core-ui (>=0.0.12, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +182 more potentially affected by CVE-2024-52809 via @intlify/core-base (>=9.3.0, <=9.14.1)

@intlify/core-base NPM version =9.3.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.1-beta.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =8.2.2, =9.0.4 - @delfinjs/shared-vue 1.0.0 - @directus-labs/flow-trigger-bundle 1.0.0 - @dispatchable/metronic-vue 1.0.0 and more Source cves: CVE-2024-52809 Source...

CVE-2024-52809

creationtimestamp| type| source ---|---|--- 2024-11-29 18:41:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113567706103109724...

CVE-2024-52809

CVE-2024-52809 affects the Vue.js internationalization plugin vue-i18n . In affected versions, locale messages passed to createI18n or useI18n can cause the AST for locale messages to be generated in development mode, creating a potential Cross-site Scripting (XSS) risk. The issue is mitigated in...

CVE-2024-52809 Cross-site Scripting vulnerability with prototype pollution in vue-i18n

vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to createI18n or useI18n. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in versions...

@actindo/core-ui (>=0.0.12, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +129 more potentially affected by CVE-2024-52809 via vue-i18n (>=9.3.0, <=9.14.1)

vue-i18n NPM version =9.3.0, =0.0.12, =0.0.1, =0.0.1, =0.0.1, =0.0.1-beta.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =8.2.2, =9.0.4 - @delfinjs/shared-vue 1.0.0 - @directus-labs/flow-trigger-bundle 1.0.0 - @dispatchable/metronic-vue 1.0.0 and more Source cves: CVE-2024-52809 Source advisory:...