39687 matches found
PT-2026-99483
Name of the Vulnerable Software and Affected Versions Heym versions prior to 0.0.91 Description Two server-side request forgery SSRF gaps exist in the software. First, the LLM image-edit input loader load image bytes fetches HTTP/HTTPS URLs provided by the caller using a bare httpx.get, which onl...
CVE-2026-100699
Nodemailer is a Node.js email-sending library. In versions = 9.1.0 and 10.0.9, the address parser src/addressparser mishandles addresses whose local-part is a quoted string and that are followed by RFC 5322 comments, allowing trailing comment-separated domain atoms to be retained in the normalize...
Inefficient Algorithmic Complexity
Overview nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the address parser in src/addressparser/index.ts, where the regex /\s\b^@\s+@^\s+\b\s/ was used to search free text for a...
CVE-2026-100699
Nodemailer is a Node.js email-sending library. In versions = 9.1.0 and 10.0.9, the address parser src/addressparser mishandles addresses whose local-part is a quoted string and that are followed by RFC 5322 comments, allowing trailing comment-separated domain atoms to be retained in the normalize...
UBUNTU-CVE-2026-100699
Nodemailer is a Node.js email-sending library. In versions = 9.1.0 and 10.0.9, the address parser src/addressparser mishandles addresses whose local-part is a quoted string and that are followed by RFC 5322 comments, allowing trailing comment-separated domain atoms to be retained in the normalize...
CVE-2026-100700
A flaw was found in nodemailer. An inefficient regular expression within the address parser component is susceptible to excessive backtracking when evaluating untrusted input. A remote attacker can exploit this vulnerability by submitting crafted email header values containing long text sequences...
CVE-2026-100699
A flaw was found in nodemailer. The address parser incorrectly processes email addresses containing quoted local parts followed by comments, allowing trailing domain text to be retained in the normalized address. A remote attacker could supply a crafted recipient address to inject malformed domai...
CVE-2026-100699 Nodemailer before 10.0.9 Malformed Envelope Recipient via RFC 5322 Comment
Nodemailer is a Node.js email-sending library. In versions = 9.1.0 and 10.0.9, the address parser src/addressparser mishandles addresses whose local-part is a quoted string and that are followed by RFC 5322 comments, allowing trailing comment-separated domain atoms to be retained in the normalize...
CVE-2026-100699
The Node.js email-sending library Nodemailer versions >= 9.1.0 and
CVE-2026-100699
Nodemailer is a Node.js email-sending library. In versions = 9.1.0 and 10.0.9, the address parser src/addressparser mishandles addresses whose local-part is a quoted string and that are followed by RFC 5322 comments, allowing trailing comment-separated domain atoms to be retained in the normalize...
EUVD-2026-87672
Nodemailer is a Node.js email-sending library. In versions = 9.1.0 and 10.0.9, the address parser src/addressparser mishandles addresses whose local-part is a quoted string and that are followed by RFC 5322 comments, allowing trailing comment-separated domain atoms to be retained in the normalize...
CVE-2026-100699 Nodemailer before 10.0.9 Malformed Envelope Recipient via RFC 5322 Comment
Nodemailer is a Node.js email-sending library. In versions = 9.1.0 and 10.0.9, the address parser src/addressparser mishandles addresses whose local-part is a quoted string and that are followed by RFC 5322 comments, allowing trailing comment-separated domain atoms to be retained in the normalize...
CVE-2026-100672 grav-plugin-comments before 1.2.11 Unauthenticated Information Disclosure
The Comments plugin getgrav/grav-plugin-comments for Grav CMS through version 1.2.10 registers an admin handler that returns comment data as JSON without any authentication check. The handler branches on isAdmin, which only indicates that the admin service is registered on the current route rathe...
CVE-2026-100672 grav-plugin-comments before 1.2.11 Unauthenticated Information Disclosure
The Comments plugin getgrav/grav-plugin-comments for Grav CMS through version 1.2.10 registers an admin handler that returns comment data as JSON without any authentication check. The handler branches on isAdmin, which only indicates that the admin service is registered on the current route rathe...
Astra Linux – Vulnerability in Chromium
In the UI representation of FullScreen in Google Chrome before version 152.0.7977.75, it was possible for a remote attacker to spoof the address bar through a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
UI misrepresentation in URL formatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to spoof the address bar via a crafted domain name. Chromium security severity: Medium...
CVE-2026-100572
OpenClaw versions = 2026.3.25 and 2026.8.1 apply invalid-token rate limiting for Synology Chat webhooks before authentication and key the limit on the raw proxy socket address. In deployments where OpenClaw sits behind a trusted reverse proxy or tunnel and multiple external clients share a single...
CVE-2026-100572
OpenClaw versions >= 2026.3.25 and
EUVD-2026-87479
OpenClaw versions = 2026.3.25 and 2026.8.1 apply invalid-token rate limiting for Synology Chat webhooks before authentication and key the limit on the raw proxy socket address. In deployments where OpenClaw sits behind a trusted reverse proxy or tunnel and multiple external clients share a single...
CLEANSTART-2026-OJ26404 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation wou...
Security vulnerability affects the loki package. Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...