PT-2024-34883

Name of the Vulnerable Software and Affected Versions AuthKit library for Next.js versions prior to 0.13.2 Description The issue concerns the logging of refresh tokens to the console when the debug flag is enabled. This flag is disabled by default. There are no known workarounds for this issue...

PT-2024-24930 · Frigate · Frigate

Name of the Vulnerable Software and Affected Versions: Frigate versions prior to 0.13.2 Description: The issue arises from the lack of limitation on the length of filenames and the costly use of Unicode normalization with the form NFKD under the hood of the secure filename function. This can lead...

Command Injection

Overview chrome-launcher is a library to launch Google Chrome with ease from node. Affected versions of this package are vulnerable to Command Injection. By controlling the $HOME environment variable in Linux operating systems, an attacker can execute arbitrary code. PoC: var maliciouscode = '&...