CVE-2026-78374: Insertion of Sensitive Information Into Sent Data

Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension 2.3.0 - The front-end JSON editor endpoint exposes an action called contact that requires no authentication, no CSRF token, no captcha when no captcha plugin is enabled and has no rate limitin...

Cross-site Scripting (XSS)

Overview nicegui is a Create web-based user interfaces with Python. The nice way. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the runmethod function. An attacker can execute arbitrary JavaScript in the victim's browser by supplying crafted input as a method...

Regular Expression Denial of Service in jsoneditor

JSON Editor is a web-based tool to view, edit, format, and validate JSON. It has various modes such as a tree editor, a code editor, and a plain text editor. The jsoneditor package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide a crafted element a...

GHSA-HHFG-6HFC-RVXM Regular Expression Denial of Service in jsoneditor

JSON Editor is a web-based tool to view, edit, format, and validate JSON. It has various modes such as a tree editor, a code editor, and a plain text editor. The jsoneditor package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide a crafted element a...

The vulnerability of the JSON editor component in Visual Studio Code, a tool for software development by Microsoft Visual Studio, arises from insufficient input data validation. This allows attackers to execute arbitrary code.

The vulnerability of the JSON editor component in Visual Studio Code, a tool for software development by Microsoft Visual Studio, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...