CVE-2026-42565

@workos/authkit-session is a toolkit for building WorkOS AuthKit framework integrations. Prior to 0.5.1, an open redirect vulnerability exists in AuthService.handleCallback due to insufficient validation of the returnPathname value derived from the OAuth state parameter. The state parameter is...

GHSA-6F52-WPX2-HVF2 vulnerabilities

Vulnerabilities for packages: s5cmd, capslock, metrics-server, influx, kustomize, falco-exporter, newrelic-infra-operator, kubernetes-csi-driver-nfs, frp, docker-cli-buildx, addon-resizer, http-echo, oauth2-proxy, gotestsum, prometheus-blackbox-exporter, cortex, hivemind, trivy, xcaddy,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: s5cmd, capslock, metrics-server, tailscale, influx, gptscript, falco-exporter, newrelic-infra-operator, kubernetes-csi-driver-nfs, goreleaser, frp, docker-cli-buildx, addon-resizer, http-echo, oauth2-proxy, gotestsum, prometheus-blackbox-exporter, cortex, hivemind,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: s5cmd, capslock, metrics-server, tailscale, influx, gptscript, falco-exporter, newrelic-infra-operator, kubernetes-csi-driver-nfs, goreleaser, frp, docker-cli-buildx, addon-resizer, http-echo, oauth2-proxy, gotestsum, prometheus-blackbox-exporter, cortex, hivemind,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: swagger, checksec, cilium-fips, haproxy-ingress, prometheus-adapter-fips, aws-flb-cloudwatch-fips, cloudbeat-fips, prometheus-statsd-exporter, x509-certificate-exporter-fips, cloudnative-pg-fips, grpcurl, lvm-driver, eck-operator, flux-helm-controller, argo-workflows...

CVE-2019-13983

Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php...

CVE-2019-13983

Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php...

CVE-2019-13983

Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php...