Vendure - Arbitrary File Read

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

MagicMirror <= 2.35.0 - Server-Side Request Forgery

An unauthenticated Server-Side Request Forgery SSRF vulnerability in the /cors endpoint allows any remote attacker to force the MagicMirror² server to perform arbitrary HTTP requests to internal networks, cloud metadata services, and localhost services. The endpoint also expands environment...

OwnCloud - Phpinfo Configuration

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information...

GHSA-C4G9-Q4RC-577F vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-GVHP-5J8M-528X vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-V49M-R4W3-2P5X vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-2W9W-FGQ6-2VMC vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-HJV3-X37X-J8JM vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-G2FH-3663-3JF8 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-G34X-MGC7-JQCH vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-3PP7-M8F5-89GX vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-J3CH-R4QX-FPVF vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-VPV3-WPRV-R8G5 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-R7JM-58JJ-XFM2 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-10998 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-9J2P-P9PF-3G9V vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-FFFH-QXQH-QV99 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-W4GR-836P-X38H vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-9F48-PFWP-H463 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-FJ38-HPF4-JXG7 vulnerabilities

Vulnerabilities for packages: chromium...