13135 matches found
Vite Dev Server - Directory Traversal
Vite is a modern frontend build tool. In Vite prior to versions 6.4.3, 6.3.4, and 5.4.23, a directory traversal vulnerability affects the Vite development server. When the Vite dev server is launched with the --host or server.host option, an unauthenticated attacker can craft a request with a pat...
Symfony HttpFoundation - Access Control Bypass via PATH_INFO
Symfony HttpFoundation component = 2.0.0 and prior to versions 5.4.50, 6.4.29, and 7.3.7 contains an access control bypass vulnerability. The Request class improperly interprets some PATHINFO values, producing URL paths without a leading /. This allows bypassing access control rules that are buil...
MOVEit Transfer - SQL Injection
In Progress MOVEit Transfer before 2021.0.8 13.0.8, 2021.1.6 13.1.6, 2022.0.6 14.0.6, 2022.1.7 14.1.7, and 2023.0.3 15.0.3, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit...
ROOT-APP-NPM-CVE-2026-64645 CVE-2026-64645 in next - Patched by Root
Root has patched CVE-2026-64645 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44573 CVE-2026-44573 in next - Patched by Root
Root has patched CVE-2026-44573 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-Q4GF-8MX6-V5V3 GHSA-q4gf-8mx6-v5v3 in next - Patched by Root
Root has patched GHSA-q4gf-8mx6-v5v3 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64641 CVE-2026-64641 in next - Patched by Root
Root has patched CVE-2026-64641 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-8H8Q-6873-Q5FJ GHSA-8h8q-6873-q5fj in next - Patched by Root
Root has patched GHSA-8h8q-6873-q5fj in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44578 CVE-2026-44578 in next - Patched by Root
Root has patched CVE-2026-44578 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64649 CVE-2026-64649 in next - Patched by Root
Root has patched CVE-2026-64649 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-HCPX-6FM6-WX23 GHSA-hcpx-6fm6-wx23 in axios - Patched by Root
Root has patched GHSA-hcpx-6fm6-wx23 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-GCFJ-64VW-6MP9 GHSA-gcfj-64vw-6mp9 in axios - Patched by Root
Root has patched GHSA-gcfj-64vw-6mp9 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-48734 CVE-2025-48734 in commons-beanutils:commons-beanutils - Patched by Root
Root has patched CVE-2025-48734 in the commons-beanutils:commons-beanutils package for Root:Maven. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-21508 CVE-2024-21508 in mysql2 - Patched by Root
Root has patched CVE-2024-21508 in the mysql2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-21511 CVE-2024-21511 in mysql2 - Patched by Root
Root has patched CVE-2024-21511 in the mysql2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-75604 CVE-2026-75604 in next - Patched by Root
Root has patched CVE-2026-75604 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-9496 CVE-2026-9496 in pacote - Patched by Root
Root has patched CVE-2026-9496 in the pacote package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-55173 CVE-2025-55173 in next - Patched by Root
Root has patched CVE-2025-55173 in the next package for Root:npm. Multiple fixed versions available...