Lucene search
+L

2 matches found

Patchstack
Patchstack
added 2026/07/31 9:49 p.m.10 views

NPM: Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide authorization bypass

NPM: Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide authorization bypass vulnerability discovered by ? in WordPress Npm apostrophe versions = 4.30.0...

9.1CVSS5.4AI score0.00237EPSS
SaveExploits0References5Affected Software1
Patchstack
Patchstack
added 2026/05/14 6:26 p.m.14 views

NPM: Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

NPM: Apostrophe has default XSS via xmp raw-text passthrough in sanitize-html vulnerability discovered by ? in WordPress Npm sanitize-html versions 2.17.3...

5.8AI score0.00514EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder