CVE-2026-76842

CVE-2026-76842 affects the Mercado Pago Node.js SDK (through 3.4.0 ). The payment, paymentRefund, advancedPayment, and disbursementRefund clients interpolate caller-supplied identifiers into API request paths via template literals without percent-encoding , so URL-structural characters (dot-dot, ...

cwe-sdk-javascript

cwe-sdk Um SDK Node.js de Common Weakness Enumeration CWE em conformidade com MITRE / CAPEC...

drift-node-sdk

Il SDK Node.js Tusk Drift consente test API veloci e deterministici catturando e riproducendo le chiamate API fatte verso/da il tuo servizio. Registra automaticamente chiamate API reali, poi riproducile come test utilizzando la CLI Tusk per trovare regressioni. Durante la riproduzione, tutte le...

envsec

envsec Sichere Verwaltung von Umgebungsgeheimnissen mit nativen Betriebssystem-Schlüsselspeichern. Demo Funktionen Geheimnisse im nativen Schlüsselspeicher des Betriebssystems speichern nicht in Klartext-Dateien Plattformübergreifend: macOS, Linux, Windows Geheimnisse nach Kontext organisieren z...

Stripe: Limited path traversal in Node.js SDK leads to PII disclosure

A limited path traversal vulnerability in the Node.js SDK allowed an attacker to retrieve personally identifiable information PII of users. By using . and .. as identifiers in API methods, the attacker could call parent API methods and access sensitive data such as email addresses, names, and...