3899 matches found
ROOT-APP-NPM-AIKIDO-2026-10754 AIKIDO-2026-10754 in next - Patched by Root
Root has patched AIKIDO-2026-10754 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-553733 AIKIDO-2026-553733 in next - Patched by Root
Root has patched AIKIDO-2026-553733 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-H25M-26QC-WCJF GHSA-h25m-26qc-wcjf in next - Patched by Root
Root has patched GHSA-h25m-26qc-wcjf in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10758 AIKIDO-2026-10758 in next - Patched by Root
Root has patched AIKIDO-2026-10758 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-59471 CVE-2025-59471 in next - Patched by Root
Root has patched CVE-2025-59471 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-Q4GF-8MX6-V5V3 GHSA-q4gf-8mx6-v5v3 in next - Patched by Root
Root has patched GHSA-q4gf-8mx6-v5v3 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-2XP9-VWFH-VXW4 GHSA-2xp9-vwfh-vxw4 in next - Patched by Root
Root has patched GHSA-2xp9-vwfh-vxw4 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-47831 CVE-2024-47831 in next - Patched by Root
Root has patched CVE-2024-47831 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-34351 CVE-2024-34351 in next - Patched by Root
Root has patched CVE-2024-34351 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-MWV6-3258-Q52C GHSA-mwv6-3258-q52c in next - Patched by Root
Root has patched GHSA-mwv6-3258-q52c in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10095 AIKIDO-2026-10095 in next - Patched by Root
Root has patched AIKIDO-2026-10095 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-29927 CVE-2025-29927 in next - Patched by Root
Root has patched CVE-2025-29927 in the next package for Root:npm. Multiple fixed versions available...
CVE-2026-91165
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.27.6, the responsemode=formpost SSO return path in warpgate-protocol-http/src/api/ssoproviderlist.rs uses serdejson::tostring inside ReturnToSsoPostResponse without neutralizing a script-closing sequence. The...
CVE-2026-58491
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpgate/api/sso/providers/:name/start endpoint stores an attacker-controlled next parameter that the POST /@warpgate/api/sso/return handler inserts without HTML escaping into the response generated by...
CVE-2026-58491 Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpgate/api/sso/providers/:name/start endpoint stores an attacker-controlled next parameter that the POST /@warpgate/api/sso/return handler inserts without HTML escaping into the response generated by...
EUVD-2026-84059
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpgate/api/sso/providers/:name/start endpoint stores an attacker-controlled next parameter that the POST /@warpgate/api/sso/return handler inserts without HTML escaping into the response generated by...
CVE-2026-58491 Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpgate/api/sso/providers/:name/start endpoint stores an attacker-controlled next parameter that the POST /@warpgate/api/sso/return handler inserts without HTML escaping into the response generated by...
CVE-2026-58491 Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpgate/api/sso/providers/:name/start endpoint stores an attacker-controlled next parameter that the POST /@warpgate/api/sso/return handler inserts without HTML escaping into the response generated by...
CVE-2026-58491
Warpgate (an open-source SSH, HTTPS, and MySQL bastion host for Linux) prior to 0.25.5 is vulnerable to reflected XSS and open redirect in its SSO return endpoint. The root cause is an attacker-controlled next parameter stored at /@warpgate/api/sso/providers/:name/start and inserted without HTML ...