Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the PSD file preview. An attacker can exhaust server memory resources by uploading a specially crafted PSD file, potentially leading to a denial of service. Remediation Upgrade...

CVE-2025-15454

A vulnerability was detected in zhanglun lettura up to 0.1.22. This issue affects some unknown processing of the file src/components/ArticleView/ContentRender.tsx of the component RSS Handler. The manipulation results in cross site scripting. The attack can be executed remotely. This attack is...

Lettura 代码注入漏洞

Lettura is an RSS reader developed by zhanglun. A code injection vulnerability exists in Lettura 0.1.22 and earlier versions, which originates from an incorrect operation of the src/components/ArticleView/ContentRender.tsx file of the component RSS Handler, and could lead to a cross-site scriptin...