48 matches found
NPM: msgpack5: Reserved byte can cause unbounded stream buffering
NPM: msgpack5: Reserved byte can cause unbounded stream buffering vulnerability discovered by ? in WordPress Npm msgpack5 versions 6.1.0...
NPM: Ghost: Remote Code Execution via Bookmark Card Images
NPM: Ghost: Remote Code Execution via Bookmark Card Images vulnerability discovered by ? in WordPress Npm ghost versions = 6.56.0, 6.67.0...
NPM: Ghost: Stored XSS via Embed Card Previews
NPM: Ghost: Stored XSS via Embed Card Previews vulnerability discovered by ? in WordPress Npm ghost versions = 6.34.0, 6.67.0...
NPM: Payload: Remote Code Execution through first-register
NPM: Payload: Remote Code Execution through first-register vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...
NPM: Payload external upload trust validation issue
NPM: Payload external upload trust validation issue vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.90.0...
NPM: Payload: Bypassed sanitization of user uploaded SVGs
NPM: Payload: Bypassed sanitization of user uploaded SVGs vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...
NPM: Payload: Incomplete validation during the upload file lifecycle
NPM: Payload: Incomplete validation during the upload file lifecycle vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...
NPM: Payload: Unauthenticated account-lockout denial of service
NPM: Payload: Unauthenticated account-lockout denial of service vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...
NPM: Payload: Uploaded XML files could execute same-origin JavaScript
NPM: Payload: Uploaded XML files could execute same-origin JavaScript vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...
NPM: Payload: Unauthorized update to collection documents
NPM: Payload: Unauthorized update to collection documents vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...
NPM: Payload authentication token field handling issue
NPM: Payload authentication token field handling issue vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.90.0...
NPM: Ghost: Stored XSS via Bookmark Card Images
NPM: Ghost: Stored XSS via Bookmark Card Images vulnerability discovered by ? in WordPress Npm ghost versions = 5.94.0, 6.64.0...
NPM: Ghost: Path Traversal via Locale Setting
NPM: Ghost: Path Traversal via Locale Setting vulnerability discovered by ? in WordPress Npm ghost versions = 1.20.0, 6.64.0...
NPM: Ghost: Remote Code Execution via Theme Translation Files
NPM: Ghost: Remote Code Execution via Theme Translation Files vulnerability discovered by ? in WordPress Npm ghost versions = 6.10.3, 6.64.0...
NPM: LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iteration
NPM: LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, .first/.last, negative index, and for-loop iteration vulnerability discovered by ? in WordPress Npm liquidjs versions = 10.27.1...
NPM: Ghost: Authorization Bypass in Comments Feature
NPM: Ghost: Authorization Bypass in Comments Feature vulnerability discovered by ? in WordPress Npm ghost versions = 5.9.0, 6.44.1...
NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json
NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json vulnerability discovered by ? in WordPress Npm knowns versions = 0.29.1...
NPM: Payload didn't enforce field-level password update restrictions
NPM: Payload didn't enforce field-level password update restrictions vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...
NPM: Payload: ReDoS in Multipart Content-Type Validation
NPM: Payload: ReDoS in Multipart Content-Type Validation vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.90.0...
NPM: Payload vulnerable to API key disclosure through ordinary document reads
NPM: Payload vulnerable to API key disclosure through ordinary document reads vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.90.0...