CVE-2026-19352

CVE-2026-19352 affects mifi lossless-cut (up to 3.69.0) in the Built-in HTTP API Service, specifically the file src/main/httpServer.ts. The issue enables server-side request forgery (SSRF) when a manipulated request is processed, requiring access to the local network. Exploit complexity is descri...

EUVD-2026-54920

A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality of the file src/main/httpServer.ts of the component Built-in HTTP API Service. Executing a manipulation can lead to server-side request forgery. The attack requires access to the...

CVE-2026-19352 mifi lossless-cut Built-in HTTP API Service httpServer.ts server-side request forgery

A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality of the file src/main/httpServer.ts of the component Built-in HTTP API Service. Executing a manipulation can lead to server-side request forgery. The attack requires access to the...

CVE-2023-50044

Cesanta MJS 2.20.0 has a getpropbuiltinforeign out-of-bounds read if a Built-in API name occurs in a substring of an input string...

Out-of-bounds

Cesanta MJS 2.20.0 has a getpropbuiltinforeign out-of-bounds read if a Built-in API name occurs in a substring of an input string...

CVE-2023-50044

Cesanta MJS 2.20.0 has a getpropbuiltinforeign out-of-bounds read if a Built-in API name occurs in a substring of an input string...

CVE-2023-50044: Buffer Copy without Checking Size of Input

Cesanta MJS 2.20.0 has a getpropbuiltinforeign out-of-bounds read if a Built-in API name occurs in a substring of an input string...