Lucene search
+L

22058 matches found

OSV
OSV
added 2026/06/16 11:39 p.m.14 views

GHSA-X6QJ-4H56-5RJ5 @nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g)

Summary This is an incomplete fix for GHSA-6m52-m754-pw2g. Source code may still be stolen during dev when using the webpack / rspack builder if the dev server is bound to a non-loopback address e.g. nuxt dev --host and the developer opens a malicious site on the same network. Details The fix for...

5.9CVSS5.3AI score0.0028EPSS
SaveExploits1References7
OSV
OSV
added 2026/06/16 11:6 p.m.6 views

OPENSUSE-SU-2026:20970-1 Security update for postgresql17

This update for postgresql17 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified bsc1265172. - CVE-2026-6473: integer overflows in memory-allocation calculations bsc1265173. - CVE-2026-6474: Guard against malicious time zone...

8.8CVSS6.2AI score0.01006EPSS
SaveExploits0References22
OSV
OSV
added 2026/06/16 11:5 p.m.4 views

SUSE-SU-2026:22149-1 Security update for postgresql17

This update for postgresql17 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified bsc1265172. - CVE-2026-6473: integer overflows in memory-allocation calculations bsc1265173. - CVE-2026-6474: Guard against malicious time zone...

8.8CVSS6.2AI score0.01006EPSS
SaveExploits0References23
OSV
OSV
added 2026/06/16 9:31 p.m.11 views

GHSA-X7CF-6GP3-Q5F8 Duplicate Advisory: MCP Streamable HTTP redirects could forward configured custom headers to another origin

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rjxq-qqhf-8hwh. This link is maintained to preserve external references. Original Description OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers that forwar...

7.1CVSS5.3AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/06/16 8:12 p.m.37 views

CVE-2026-48294

Adobe Acrobat PDF Extension Chrome versions 26.5.2.2 and earlier are affected by a UXSS-class cross-origin data disclosure vulnerability. An attacker could exploit this vulnerability to gain access to data regarding the victim's session. Exploitation of this issue requires user interaction in tha...

7.4CVSS0.01906EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/16 8:12 p.m.82 views

CVE-2026-48294

CVE-2026-48294 concerns Adobe Acrobat PDF Extension (Chrome)

7.4CVSS5.3AI score0.01906EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/06/16 7:17 p.m.16 views

CVE-2026-53840

OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers that forwards operator-configured custom headers during cross-origin redirects. Attackers controlling or compromising an MCP endpoint can redirect requests to exfiltrate sensitive headers lik...

7.1CVSS0.00223EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/16 7:0 p.m.13 views

GHSA-V733-MWR6-FGCM n8n: Same-Origin XSS in Respond to Webhook Node

Impact An authenticated user with workflow edit access could configure a Respond to Webhook node to serve binary content with an attacker-controlled Content-Type. The binary response path bypassed the central Content-Security-Policy sandbox header, allowing a public webhook to execute JavaScript ...

7.6CVSS5.7AI score0.00217EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/06/16 7:0 p.m.16 views

n8n: Same-Origin XSS in Respond to Webhook Node

Impact An authenticated user with workflow edit access could configure a Respond to Webhook node to serve binary content with an attacker-controlled Content-Type. The binary response path bypassed the central Content-Security-Policy sandbox header, allowing a public webhook to execute JavaScript ...

7CVSS5.6AI score0.00217EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2026/06/16 7:0 p.m.9 views

NPM: n8n: Same-Origin XSS in Respond to Webhook Node

NPM: n8n: Same-Origin XSS in Respond to Webhook Node vulnerability discovered by ? in WordPress Npm n8n versions 1.123.55...

7CVSS5.8AI score0.00217EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/06/16 6:4 p.m.10 views

CVE-2026-53840 OpenClaw < 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin Redirects

OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers that forwards operator-configured custom headers during cross-origin redirects. Attackers controlling or compromising an MCP endpoint can redirect requests to exfiltrate sensitive headers lik...

6CVSS5.9AI score
SaveExploits0References5
CVE
CVE
added 2026/06/16 6:4 p.m.33 views

CVE-2026-53840

OpenClaw CVE-2026-53840 affects the OpenClaw MCP stack before version 2026.5.12. The issue is an information-disclosure vulnerability in streamable-http MCP servers that forwards operator-configured custom headers during cross-origin redirects. If an attacker controls or can compromise an MCP end...

7.1CVSS5.3AI score0.00223EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/06/16 2:38 p.m.11 views

GHSA-2PVR-WF23-7PC7 Astro: Host header SSRF in prerendered error page fetch

Summary Astro SSR apps with prerendered error pages /404 or /500 using export const prerender = true fetch those pages over HTTP at runtime when an error occurs. The URL for this fetch is derived from request.url, which in turn gets its origin from the incoming Host header. When the Host header i...

7.5CVSS5.7AI score0.00333EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/06/16 2:38 p.m.16 views

Astro: Host header SSRF in prerendered error page fetch

Summary Astro SSR apps with prerendered error pages /404 or /500 using export const prerender = true fetch those pages over HTTP at runtime when an error occurs. The URL for this fetch is derived from request.url, which in turn gets its origin from the incoming Host header. When the Host header i...

7.5CVSS5.6AI score0.00333EPSS
SaveExploits0References2Affected Software1
Snyk
Snyk
added 2026/06/16 2:15 p.m.12 views

Permissive Cross-domain Policy with Untrusted Domains

Overview hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Permissive Cross-domain Policy with Untrusted Domains in the CORS middleware. An attacker can access sensitive information and perform unauthorized actions by sending cross-origin request...

7.1CVSS6AI score0.00328EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/16 2:15 p.m.11 views

GHSA-88FW-HQM2-52QC hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard

Summary With credentials: true and no explicit origin the default wildcard, the CORS Middleware reflects the request's Origin and sends Access-Control-Allow-Credentials: true. Any site can then make credentialed cross-origin requests and read the responses, exposing cookie-authenticated endpoints...

7.1CVSS5.5AI score0.00328EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/06/16 2:15 p.m.43 views

hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard

Summary With credentials: true and no explicit origin the default wildcard, the CORS Middleware reflects the request's Origin and sends Access-Control-Allow-Credentials: true. Any site can then make credentialed cross-origin requests and read the responses, exposing cookie-authenticated endpoints...

7.1CVSS5.4AI score0.00328EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2026/06/16 2:15 p.m.8 views

NPM: hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard

NPM: hono: CORS Middleware reflects any Origin with credentials when origin defaults to the wildcard vulnerability discovered by ? in WordPress Npm hono versions 4.12.25...

7.1CVSS5.8AI score0.00328EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2026/06/16 1:16 p.m.15 views

CVE-2026-12304

Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

9.1CVSS0.00189EPSS
SaveExploits0References5
OSV
OSV
added 2026/06/16 1:16 p.m.8 views

UBUNTU-CVE-2026-12304

Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

9.1CVSS5.8AI score0.00189EPSS
SaveExploits0References5
Rows per page
Query Builder