124106 matches found
EUVD-2026-101585
Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, constructs a command in the crossnote namespace, and invokes...
CVE-2026-54702 Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler
Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, constructs a command in the crossnote namespace, and invokes...
EUVD-2026-101588
Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.3, validateurlssrf and isprivateip in src/core/utils.py compare resolved addresses only against native private IPv4 and IPv6 ranges and do not unwrap IPv4-mapped, IPv4-compatible, 6to4, or NAT64 transition...
CVE-2026-76083 Redash: JSON data source query URL can bypass base URL restriction
Redash is a package for data visualization and sharing. From 10.0.0 until 26.9.0, the JSON data source query runner in redash/queryrunner/jsonds.py used getallresults to combine its configured baseurl with a user-supplied query URL by using urljoin. An absolute query URL replaced the configured...
CVE-2026-102037
An XML Injection vulnerability in the Unified Threat Management daemon utmd of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated network attacker to commit arbitrary device configuration with root privileges via a malicious response from a configured custom URL-feed server...
CVE-2026-102037
An XML Injection vulnerability exists in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices. This flaw allows an unauthenticated network attacker to commit arbitrary device configurations with root privileges . The attack is triggered via a malicious re...
EUVD-2026-101362
An XML Injection vulnerability in the Unified Threat Management daemon utmd of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated network attacker to commit arbitrary device configuration with root privileges via a malicious response from a configured custom URL-feed server...
TaskingAI server request forgery vulnerability
TaskingAI versions 0.3.0 and earlier have a vulnerability related to server-side request forgeing. This vulnerability stems from the lack of verification for the OpenAPI servers0.url in user-defined actions. As a result, server-side request forgeing may occur. Attackers who possess project API ke...
Mat Trudel Bandit has a vulnerability in input validation.
In versions prior to 1.13.0 of Mat Trudel Bandit, version 0.6.0, there was an input validation vulnerability. This vulnerability stemmed from the lack of validation for the authority in HTTP/1 requests. As a result, unauthenticated remote attackers could set conn.host and conn.port to values that...
Vulnerability in Eclipse Adoptium.net software supply chain
There is a security vulnerability in Eclipse Adoptium.net. It stems from improper validation of URL prefixes in the link parameter and inadequate handling of dot normalization. This may allow attackers to bypass checks, redirect users to a repository controlled by them, and download malicious...
CVE-2026-101896 Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter names and numeric outlet names as properties on initially empty...
CVE-2026-101896 Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter names and numeric outlet names as properties on initially empty...
CVE-2026-101896 Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter names and numeric outlet names as properties on initially empty...
EUVD-2026-101147
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter names and numeric outlet names as properties on initially empty...
CVE-2026-101896
The @angular/router component is vulnerable to a Denial of Service (DoS) attack when Server-Side Rendering (SSR) is enabled on Node.js (V8). The root cause is the inefficient handling of numeric matrix parameter names and numeric outlet names in URL paths. When these are parsed, V8 interprets the...
RUSTSEC-2026-0351 `wasi-http`: Request with long url before query parameter crashes host
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-w36r-2hch-9xp9 For more information see the GitHub-hosted security advisory...
`wasi-http`: Request with long url before query parameter crashes host
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-w36r-2hch-9xp9 For more information see the GitHub-hosted security advisory...
CVE-2026-107718
A flaw was found in AdonisJS HTTP Server. The route URL generation helper fails to properly encode parameter values when constructing redirect destinations. A remote attacker can exploit this flaw by supplying a crafted path parameter starting with a forward slash, generating a scheme-relative...
github.com/getkin/kin-openapi: kin-openapi: Authentication bypass via URL path decoding discrepancy
A flaw was found in kin-openapi. An unauthenticated remote attacker can bypass authentication checks on protected routes by sending requests containing encoded path separators. This issue occurs because the request validation handler inspects the decoded URL path, while certain downstream routers...
PT-2026-114163
n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin blob URL. A member who uploads a crafted item can run script in the n8n origin of whoever previews it, typically the...