CVE-2026-80344 Apache Camel: Camel-AS2 Server-Side Request Forgery and Credential Disclosure via Asynchronous MDN Delivery Address

Server-Side Request Forgery SSRF vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. In the AS2 protocol the sender of a message may request that the Message Disposition Notification be returned asynchronously to an...

CVE-2026-80344

The camel-as2 component in Apache Camel is vulnerable to Server-Side Request Forgery (SSRF) and credential disclosure (CWE-918, CWE-200) due to an unconstrained asynchronous Message Disposition Notification (MDN) delivery. An attacker can provide a malicious Receipt-Delivery-Option address in an ...

Exploit for CVE-2026-80344

CVE-2026-80344 — camel-as2: asynchronous MDN SSRF and credenti...

Malicious code in radbot-mdn (npm)

The package radbot-mdn was found to contain malicious code...

Malicious code in raspberry-mdn-project (npm)

The package raspberry-mdn-project was found to contain malicious code...

MAL-2025-31470 Malicious code in radbot-mdn (npm)

The package radbot-mdn was found to contain malicious code...

MAL-2025-31666 Malicious code in raspberry-mdn-project (npm)

The package raspberry-mdn-project was found to contain malicious code...

Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials

The CORS middleware allows for insecure configurations that could potentially expose the application to multiple CORS-related vulnerabilities. Specifically, it allows setting the Access-Control-Allow-Origin header to a wildcard "" while also having the Access-Control-Allow-Credentials set to true...

@mdn/yari (>=0.14.3, <=0.14.14), @thomasrandolph/taproot (0.48.3) +7 more potentially affected by CVE-2022-21189 via dexie (>=3.1.0-beta.12, <=3.2.1)

dexie NPM version =3.1.0-beta.12, =0.14.3, =1.293.0, =1.3.0-shadowmanager.3, =0.0.181, =1.0.4, =0.1.0, =0.1.0, =0.1.1, =0.1.8 Source cves: CVE-2022-21189 Source advisory: SNYK:JS-DEXIE-2607042...

Rockwell Automation Bul 825/CET-4 825-MDN Motor Overload

Binary data 752282.prm...

Mozilla MDN Password Disclosure Affects 76,000 Developers

Some members of the Mozilla Developer Network are being advised to change their passwords after email addresses and encrypted credentials were disclosed on a public server. Mozilla director of developer relations Stormy Peters said the organization has been investigating the disclosure for 10 day...