13172 matches found
JTL Software WMS security vulnerability
JTL Software’s WMS has a security vulnerability. This vulnerability stems from the fact that the authorization middleware only requires the Authorization header for GET and HEAD requests, and it does not reject requests that carry incorrect format or non-bearer Authorization headers. As a result,...
TanStack Router cross-site scripting vulnerability
The TanStack Router contains a cross-site scripting vulnerability. This vulnerability arises because unauthenticated attackers can inject non-public fields into the payload of server-side function requests. As a result, the state of the middleware is altered, and objects with incorrect response...
CVE-2026-108754
GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger middleware records the raw query string before extractAuthKey strips the key parameter. Attackers with read access to console logs or ./data/logs/app.log can recover proxy keys...
CVE-2026-108754
GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger middleware records the raw query string before extractAuthKey strips the key parameter. Attackers with read access to console logs or ./data/logs/app.log can recover proxy keys...
EUVD-2026-96919
GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger middleware records the raw query string before extractAuthKey strips the key parameter. Attackers with read access to console logs or ./data/logs/app.log can recover proxy keys...
oauth2-proxy
OAuth2 Proxy è uno strumento open-source flessibile che può fungere da reverse proxy autonomo o da middleware integrato in configurazioni di reverse proxy o load balancer esistenti. Fornisce un modo semplice e sicuro per proteggere le tue applicazioni web con l'autenticazione OAuth2 / OIDC. Come...
CLSA-2026-1791677094 TuxCare security update for webpack-dev-middleware (1 CVE)
TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 1.11.0-tuxcare.2...
PT-2026-110156
Name of the Vulnerable Software and Affected Versions GPT-Load versions prior to 1.4.12 Description A cleartext logging issue exists where client proxy keys are exposed. This occurs because the Gin Logger middleware records the raw query string before the extractAuthKey function strips the key...
CVE-2026-108754: Insertion of Sensitive Information into Log File
GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger middleware records the raw query string before extractAuthKey strips the key parameter. Attackers with read access to console logs or ./data/logs/app.log can recover proxy keys...
PT-2026-120283
TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 1.11.0-tuxcare.2...
CLSA-2026-1791666638 TuxCare security update for webpack-dev-middleware (1 CVE)
TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 3.0.1-tuxcare.2...
CLSA-2026-1791666532 TuxCare security update for webpack-dev-middleware (1 CVE)
TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 3.7.3-tuxcare.2...
CLSA-2026-1791666413 TuxCare security update for webpack-dev-middleware (1 CVE)
TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 1.10.2-tuxcare.2...
CLSA-2026-1791666312 TuxCare security update for webpack-dev-middleware (1 CVE)
TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 1.12.0-tuxcare.2...
tbphp GPT-Load log information leakage vulnerability
Versions 1.4.11 and earlier of tbphp GPT-Load contain a log information leakage vulnerability. This flaw arises because the Gin Logger middleware records the original query string prior to extracting the AuthKey parameter. As a result, the client-side proxy key is stored in plaintext within conso...
CVE-2026-108545
SillyTavern versions 1.12.13 through 1.19.0 are vulnerable to a pre-authentication Denial of Service (DoS) . The root cause is that body-parser middleware executes before authentication and whitelist checks, allowing unauthenticated remote attackers to submit large or compressed JSON or urlencode...
CVE-2026-108545 SillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via Body Parsing
SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...
CLEANSTART-2026-VJ23809 multer is a middleware for handling multipart/form-data in Node
Security vulnerability affects the n8n package. multer is a middleware for handling multipart/form-data in Node...