Sensitive Information Exposure

@workos-inc/authkit-remix is vulnerable to Sensitive Information Exposure. The vulnerability is due to sealedSession and accessToken being returned from the authkitLoader, which allows an attacker to obtain sensitive authentication artifacts rendered in the browser HTML...

Malicious code in browser-html-to-rtf (npm)

The package browser-html-to-rtf was found to contain malicious code...

MAL-2025-16197 Malicious code in browser-html-to-rtf (npm)

The package browser-html-to-rtf was found to contain malicious code...

DotCMS SQL Injection Vulnerability (CNVD-2016-11007)

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A SQL injection vulnerability exists in the Site BrowserHTML pages screen in versions of DotCMS prior to 3.3.1....