CVE-2026-56091 Apache Shiro: Authentication bypass in Guice-Web integration

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

PT-2023-24680 · Zxcvbn-Ts · Zxcvbn-Ts

Name of the Vulnerable Software and Affected Versions: zxcvbn-ts versions prior to 3.0.2 Description: This issue affects users running on the NodeJS platform who are using the second argument of the zxcvbn function. It can result in unbounded resource consumption as the user inputs array is...

PT-2022-8296 · Github · Hide Files On Github

Name of the Vulnerable Software and Affected Versions: Hide Files on GitHub versions up to 2.x Description: A problematic issue has been found in Hide Files on GitHub, affecting the function addEventListener of the file extension/options.js. This issue leads to cross-site scripting and can be...