175035 matches found
undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation
A flaw was found in undici. When the cache or deduplicate interceptor is directly composed onto a Client or Pool, the destination origin is omitted from cache and request-deduplication keys. This allows a remote attacker to perform cross-origin cache poisoning, leading to information disclosure a...
CVE-2026-73305
creationtimestamp| type| source ---|---|--- 2026-08-12 20:35:26+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-j9fc-w3mr-x6mv 2026-08-14 01:01:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msyxhdipyh26...
CVE-2026-73308
creationtimestamp| type| source ---|---|--- 2026-08-12 20:35:15+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-gh4h-34gr-87r7...
CVE-2026-73406
creationtimestamp| type| source ---|---|--- 2026-08-12 20:35:13+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-hr66-5mqr-8mpx 2026-08-12 21:01:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msvzmlg3ko22...
USN-8632-1 node-follow-redirects vulnerability
Dennis Sepede discovered that follow-redirects did not properly remove custom authentication headers when following cross-domain redirects. An attacker could possibly use this issue to obtain sensitive authentication information, resulting in credential disclosure...
CVE-2026-16723 vulnerabilities
Vulnerabilities for packages: seata...
CVE-2026-59843 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59847 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59848 vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-JP6G-7MQJ-WJ53 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59845 vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-X94W-CG8G-G593 vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-6J7F-8JJP-MM8C vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-FVWJ-J79Q-57V7 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59842 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59849 vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-QP28-HPG5-J7XC vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-54465 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, commercial-gitlab-rails-ee, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips...