273 matches found
CVE-2026-123808
Nuxt UI is an intuitive Vue UI library powered by Reka UI and Tailwind CSS. Prior to 4.8.1, the server-rendered form element produced by UForm in src/runtime/components/Form.vue omits the method and action attributes and relies solely on the hydrated @submit.prevent handler to stop native...
CVE-2026-123808
The Nuxt UI Vue UI library (prior to version 4.8.1 ) contains a vulnerability where the server-rendered form element produced by UForm (located in src/runtime/components/Form.vue) omits the method and action attributes. The component relies entirely on a hydrated @submit.prevent handler to block ...
EUVD-2026-120439
Nuxt UI is an intuitive Vue UI library powered by Reka UI and Tailwind CSS. Prior to 4.8.1, the server-rendered form element produced by UForm in src/runtime/components/Form.vue omits the method and action attributes and relies solely on the hydrated @submit.prevent handler to stop native...
PT-2026-141121
Nuxt UI is an intuitive Vue UI library powered by Reka UI and Tailwind CSS. Prior to 4.8.1, the server-rendered form element produced by UForm in src/runtime/components/Form.vue omits the method and action attributes and relies solely on the hydrated @submit.prevent handler to stop native...
CVE-2026-123512
Vikunja before 2.7.1 embeds live password-reset, email-confirmation and account-deletion tokens in the URL query string of emailed links, so the full request URI, including the token, is written to Vikunja's HTTP access log and any reverse-proxy logs when a user clicks the link. Attackers with re...
CVE-2026-123512 Vikunja before 2.7.1 Sensitive Token Exposure via URL Query in Access Logs
Vikunja before 2.7.1 embeds live password-reset, email-confirmation and account-deletion tokens in the URL query string of emailed links, so the full request URI, including the token, is written to Vikunja's HTTP access log and any reverse-proxy logs when a user clicks the link. Attackers with re...
CVE-2026-123512 Vikunja before 2.7.1 Sensitive Token Exposure via URL Query in Access Logs
Vikunja before 2.7.1 embeds live password-reset, email-confirmation and account-deletion tokens in the URL query string of emailed links, so the full request URI, including the token, is written to Vikunja's HTTP access log and any reverse-proxy logs when a user clicks the link. Attackers with re...
CVE-2026-123512
Vikunja versions prior to 2.7.1 are vulnerable to sensitive token exposure due to the application embedding live password-reset , email-confirmation , and account-deletion tokens in the URL query string of emailed links. When a user clicks these links, the full request URI—including the sensitive...
CVE-2026-68933
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, public dashboard passwords were stored in plaintext, accepted through a URL query parameter, and checked without effective attempt throttling. The...
EUVD-2026-118508
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, public dashboard passwords were stored in plaintext, accepted through a URL query parameter, and checked without effective attempt throttling. The...
CVE-2026-68933 Chartbrew: Unauthenticated Brute Force of Password-Protected Dashboards Due to Missing Rate Limit and Plaintext Password Storage
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, public dashboard passwords were stored in plaintext, accepted through a URL query parameter, and checked without effective attempt throttling. The...
CVE-2026-68933 Chartbrew: Unauthenticated Brute Force of Password-Protected Dashboards Due to Missing Rate Limit and Plaintext Password Storage
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, public dashboard passwords were stored in plaintext, accepted through a URL query parameter, and checked without effective attempt throttling. The...
CVE-2026-68933
The open-source web application Chartbrew is vulnerable to an unauthenticated brute force attack on password-protected public dashboards. Prior to version 5.2.3 , the application failed to implement effective attempt throttling on validation routes and stored passwords in plaintext . Furthermore,...
CVE-2026-110802
A flaw was found in Altair. The application improperly handles script URLs supplied through URL query parameters in its iframe sandbox, allowing external scripts to be injected into the page without proper sandbox isolation. By convincing a victim to navigate to a specially crafted link, a remote...
CVE-2026-116693
A flaw was found in dd-trace. A remote attacker can cause a Denial of Service DoS by sending a specially crafted HTTP request with a malicious URL query string. The default regular expression used to obfuscate query string metadata performs excessive backtracking during evaluation, consuming high...
CVE-2026-120206 Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actions
Thelia before 3.2.0 contains a cross-site request forgery vulnerability in the back office that allows attackers to forge administrative actions because per-session CSRF tokens leak via URL query strings. Attackers can reuse leaked tokens or target the unprotected setToggleVisibilityAction and...
CVE-2026-62864
The Ring Clojure web applications library is vulnerable to a Regular-Expression Denial of Service (ReDoS) in versions prior to 1.15.5 . The wrap-nested-params function in the ring.middleware.nested-params namespace uses a backtracking regular expression to match parameter names from URL query str...
CVE-2026-62347: element-hq element-call: Element Call is a native Matrix video conferencing application
Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call SPA logs the password URL query parameter. When a user submits an error report, called a rageshake, these logs are shared with the application operator. Users can therefore...
GHSA-X94G-W73Q-HPCW dd-trace: ReDOS in URL query string obfuscation
Summary A regular expression used to obfuscate URL query strings can consume excessive CPU when processing certain attacker-controlled input. This can stall request processing and cause denial of service in applications using affected HTTP tracing integrations. Details The default query-string...
dd-trace: ReDOS in URL query string obfuscation
Summary A regular expression used to obfuscate URL query strings can consume excessive CPU when processing certain attacker-controlled input. This can stall request processing and cause denial of service in applications using affected HTTP tracing integrations. Details The default query-string...