4015 matches found
GHSA-Q4RG-7CJJ-5R86 ExpressGateway Cross-Site Scripting Vulnerability in lib/rest/routes/users.js
A cross-site scripting XSS issue exists in ExpressGateway up to 1.16.10 in the REST endpoint implemented in lib/rest/routes/users.js. User-controlled input is reflected into the HTTP response without proper sanitization, allowing arbitrary JavaScript execution in the browser of a logged-in user w...
ExpressGateway Cross-Site Scripting Vulnerability in lib/rest/routes/users.js
A cross-site scripting XSS issue exists in ExpressGateway up to 1.16.10 in the REST endpoint implemented in lib/rest/routes/users.js. User-controlled input is reflected into the HTTP response without proper sanitization, allowing arbitrary JavaScript execution in the browser of a logged-in user w...
CVE-2025-9096
A vulnerability has been found in ExpressGateway express-gateway up to 1.16.10. Affected is an unknown function in the library lib/rest/routes/apps.js of the component REST Endpoint. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...
Cross-site Scripting (XSS)
Overview express-gateway is an A microservices API gateway built on top of ExpressJS Affected versions of this package are vulnerable to Cross-site Scripting XSS via the /users/:id and /apps/:id routes, where unsanitized user-supplied input req.params.id is directly embedded into the server's...
CVE-2025-9095
A flaw has been found in ExpressGateway express-gateway up to 1.16.10. This issue affects some unknown processing in the library lib/rest/routes/users.js of the component REST Endpoint. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...
DEBIAN-CVE-2025-38542
In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix device refcount leak in atrtrcreate When updating an existing route entry in atrtrcreate, the old device reference was not being released before assigning the new device, leading to a device refcount leak. Fix...
Linux Distros Unpatched Vulnerability : CVE-2022-48999
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ipv4: Handle attempt to delete multipath route when fibinfo contains an nh reference Gwangun...
Linux Distros Unpatched Vulnerability : CVE-2022-49903
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: fix WARNING in ip6routenetexitlate During the initialization of ip6routenetinitlate, if file ipv6route or rt6stats fails to be created, the initialization...
Malicious code in object-easy-route-proxy-bundle (npm)
The package object-easy-route-proxy-bundle was found to contain malicious code...
Malicious code in route-air-private-static-bash (npm)
The package route-air-private-static-bash was found to contain malicious code...
Malicious code in book-short-grid-benchmark-route (npm)
The package book-short-grid-benchmark-route was found to contain malicious code...
Malicious code in export-route-kernel-wind-big (npm)
The package export-route-kernel-wind-big was found to contain malicious code...
MAL-2025-21922 Malicious code in grid-public-link-route-rain (npm)
The package grid-public-link-route-rain was found to contain malicious code...
MAL-2025-17507 Malicious code in container-dog-omicron-beta-route (npm)
The package container-dog-omicron-beta-route was found to contain malicious code...
MAL-2025-32475 Malicious code in route-air-private-static-bash (npm)
The package route-air-private-static-bash was found to contain malicious code...
MAL-2025-20064 Malicious code in export-route-kernel-wind-big (npm)
The package export-route-kernel-wind-big was found to contain malicious code...
MAL-2025-32477 Malicious code in route-theta-sanitize-iota-await (npm)
The package route-theta-sanitize-iota-await was found to contain malicious code...
Malicious code in table-awk-epsilon-unix-route (npm)
The package table-awk-epsilon-unix-route was found to contain malicious code...