252 matches found
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via the RedirectSlashes function. An attacker can redirect users to an external, attacker-controlled website by crafting a specially formatted URL containing backslashes, which browsers interpret as a protocol-relative...
PT-2026-20864
Name of the Vulnerable Software and Affected Versions go-chi/chi versions 5.2.2 and later Description An Open Redirect issue exists in the RedirectSlashes function of the go-chi/chi web framework. This flaw allows attackers to create malicious URLs that redirect users to arbitrary external sites,...
PT-2026-6453
Summary The RedirectSlashes function in middleware/strip.go does not perform correct input validation and can lead to an open redirect vulnerability. Details The RedirectSlashes function performs a Trim to all forward slash / characters, while prepending a single one at the begining of the path...
CVE-2021-31641
An unauthenticated XSS vulnerability exists in several IoT devices from CHIYU Technology, including BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, BF-MINI-W, and SEMAC due to a lack of sanitization when the HTTP 404 message is generated...
Emoji-Based Jailbreaking of Large Language Models
Large Language Models LLMs are integral to modern AI applications, but their safety alignment mechanisms can be bypassed through adversarial prompt engineering. This study investigates emoji-based jailbreaking, where emoji sequences are embedded in textual prompts to trigger harmful and unethical...
artificial-detection (0.1.0), benchformer (0.0.1.dev1) +1 more potentially affected by CVE-2025-14929 via transformers (4.12.3)
transformers PYPI version 4.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - artificial-detection 0.1.0 - benchformer 0.0.1.dev1 - tai-chi-engine =0.0.4, =0.0.6 Source cves: CVE-2025-14929 Source advisory:...
djangogoboot (1.0.2), foodx-devops-tools (>=0.0.0.post65, <=0.12.0) +3 more potentially affected by CVE-2025-14010 via ansible (4.10.0)
ansible PYPI version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - djangogoboot 1.0.2 - foodx-devops-tools =0.0.0.post65, =11.0.0.0rc1, =0.0.1, =0.3.0, =0.7.1 Source cves: CVE-2025-14010 Source advisory:...
EUVD-2025-177498
Malicious code in object-chi-yaml-authorize-zero npm...
EUVD-2025-178935
Malicious code in fast-sudo-fire-chi-authenticate npm...
EUVD-2025-179743
Malicious code in chi-route-good-integer-grep npm...
EUVD-2025-176947
Malicious code in proxy-process-rho-chi-web npm...
EUVD-2025-180519
Malicious code in abstract-wind-sed-void-chi npm...
Malicious code in visualize-interface-byte-char-chi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ead251d6eb4fa428186b8d534c77ad55bc56fed4b1bbae3390864c425b362a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179746
Malicious code in chi-iota-decompress-sed-emulate npm...
EUVD-2025-179745
Malicious code in chi-mu-socket-cold-small npm...
EUVD-2025-179136
Malicious code in encrypt-public-delta-chi-query npm...
MAL-2025-186139 Malicious code in chi-route-good-integer-grep (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf3808047bfb574e402fb26150085e65281d4b7fcfa053f879b3931c17b6b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179749
Malicious code in chi-bad-deserialize-throw-static npm...