@atlantjs/backend (>=11.0.11, <=11.0.79), @atlantjs/database (>=2.0.0, <=2.1.32) +4 more potentially affected by unknown CVE via typeorm (1.0.0)

typeorm NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on typeorm and may be impacted: - @atlantjs/backend =11.0.11, =2.0.0, =0.48.60, =2.1.5, =1.1.43, =1.1.45 Source cves: unknown CVE Source advisory: SNYK:JS-TYPEORM-18170276...

CVE-2026-10514: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend/framework/src/main/java/cn/cordys/config/RequestParamTrimConfig.java. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit...

BootDo security vulnerability

BootDo is a backend management system framework developed by lcg0124. BootDo has a security vulnerability, which stems from an operation that leads to cross-site request forgery...

Malicious code in redgiant-luna-backend-framework (npm)

The package redgiant-luna-backend-framework was found to contain malicious code...

MAL-2025-31928 Malicious code in redgiant-luna-backend-framework (npm)

The package redgiant-luna-backend-framework was found to contain malicious code...

JSite security vulnerabilities

JSite is JSite open source a backend management system rapid development framework. A security vulnerability exists in JSite version 1.0, which stems from improper access control of the file /druid/index.html...

FastAdmin cross-site scripting vulnerabilities

fastadmin is a web backend development framework based on ThinkPHP and Bootstrap by Karson's personal developer. A cross-site scripting vulnerability exists in fastadmin 1.5.0.20240328, which stems from manipulation of parameters that can lead to cross-site scripting attacks...

ThinkAdmin Cross-Site Script Vulnerability

ThinkAdmin is a backend administration framework developed based on the latest ThinkPHP V6 , using the MIT protocol open source. thinkAdmin v1, v6 exists a stored cross-site scripting vulnerability. A remote attacker can use the vulnerability to inject arbitrary Web script or HTML...

Command Execution Vulnerability in ThinkAdmin

ThinkAdmin is an open source framework for backend management based on ThinkPHP development . ThinkAdmin has a command execution vulnerability that can be exploited by attackers to gain server privileges...

Arbitrary File Deletion Vulnerability in FastAdmin System Backend

FastAdmin is a system backend development framework based on ThinkPHP and Bootstrap. FastAdmin system backend arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete arbitrary files...