45 matches found
Cursor 信息泄露漏洞
Cursor is an AI code editor from Cursor open source. An information disclosure vulnerability exists in Cursor versions prior to 0.51.0, which stems from an improperly set JSON mode download that could lead to arbitrary HTTP GET requests...
UBUNTU-CVE-2023-22491
Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default...
CVE-2023-22491: Improper Neutralization of Special Elements used in an SQL Command
Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default...
UBUNTU-CVE-2020-28019
Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA...