Lucene search
+L

4 matches found

Patchstack
Patchstack
added yesterday6 views

NPM: Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide authorization bypass

NPM: Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide authorization bypass vulnerability discovered by ? in WordPress Npm apostrophe versions = 4.30.0...

9.1CVSS5.4AI score0.00237EPSS
SaveExploits0References5Affected Software1
Patchstack
Patchstack
added 2026/05/14 6:26 p.m.12 views

NPM: Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

NPM: Apostrophe has default XSS via xmp raw-text passthrough in sanitize-html vulnerability discovered by ? in WordPress Npm sanitize-html versions 2.17.3...

5.8AI score0.00514EPSS
SaveExploits0References4Affected Software1
vulnersOsv
vulnersOsv
added 2020/09/03 8:42 p.m.6 views

@draadnl/openstad-cms (>=0.12.2 <=0.12.3), apostrophe-personas (>=2.0.0 <=2.2.1) +3 more potentially affected by unknown CVE via apostrophe (>=0.5.393 <=2.227.12)

apostrophe NPM version =0.5.393, =0.12.2, =2.0.0, =0.5.0, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-PV6R-VCHH-CXG9...

5.8AI score
SaveExploits0
vulnersOsv
vulnersOsv
added 2020/09/03 5:11 p.m.5 views

@draadnl/openstad-cms (>=0.12.2 <=0.12.3), apostrophe-personas (>=2.0.0 <=2.2.1) +3 more potentially affected by unknown CVE via apostrophe (>=0.5.393 <=2.227.12)

apostrophe NPM version =0.5.393, =0.12.2, =2.0.0, =0.5.0, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-H97G-4MX7-5P2P...

5.8AI score
SaveExploits0
Rows per page
Query Builder