8 matches found
CVE-2026-42565
@workos/authkit-session is a toolkit for building WorkOS AuthKit framework integrations. Prior to 0.5.1, an open redirect vulnerability exists in AuthService.handleCallback due to insufficient validation of the returnPathname value derived from the OAuth state parameter. The state parameter is...
GHSA-6F52-WPX2-HVF2 vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-pubsub, yunikorn-web, grafana-pyroscope, helm-docs, sbom-convert, wait-for-port, kyverno-policy-reporter-ui, k8ssandra-client, authservice, nri-mongodb, knative-client, kuberlr, gatus, helm-push, hey, cloudprober, cluster-autoscaler, aws-privateca-issue...
CVE-2025-22871 vulnerabilities
Vulnerabilities for packages: gptscript, yunikorn-web, crossplane-provider-azure-storage, helm-docs, sbom-convert, wait-for-port, kyverno-policy-reporter-ui, coredns, authservice, nri-mongodb, gomplate, gatus, helm-push, hey, distribution, cluster-autoscaler, q, aws-privateca-issuer, grpcurl,...
GHSA-G9PC-8G42-G6VQ vulnerabilities
Vulnerabilities for packages: gptscript, yunikorn-web, crossplane-provider-azure-storage, helm-docs, sbom-convert, wait-for-port, kyverno-policy-reporter-ui, coredns, authservice, nri-mongodb, gomplate, gatus, helm-push, hey, distribution, cluster-autoscaler, q, aws-privateca-issuer, grpcurl,...
CVE-2025-22871 vulnerabilities
Vulnerabilities for packages: mailpit, bank-vaults, fluent-operator-fips, promxy, aws-flb-cloudwatch-fips, spire-controller-manager-fips, spqr, redis-operator-fips, cert-manager-webhook-pdns, mongo-tools-fips, yunikorn-web, doppler-kubernetes-operator, dex-k8s-authenticator, mattmoor-chainit,...
CVE-2019-13983
Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php...
