PT-2026-110954

Name of the Vulnerable Software and Affected Versions Nginx UI versions prior to 2.4.1 Description The GenerateShortToken function creates standalone short-token records that lack a long Token value. However, the DeleteUserTokens function only invalidates cached entries when the long Token field ...

CVE-2026-50184

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, an issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during...

GHSA-95QP-CMMW-MGQV @angular/service-worker: Request Credential & Cache Policy Stripping

An issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during request reconstruction. When the Angular Service Worker intercepts network requests for matched assets, it reconstructs a new Request object using an internal helper function. During thi...

EUVD-2019-11387

Malware in sbrugna...

CVE-2023-45814

CVE-2023-45814 affects Bunkum’s AuthenticationService token caching. The issue arises from caching ITokens and IUser relations after 4.0, causing a use-after-free when a cached token outlives a request and is later accessed (IToken.User) in subsequent requests. Red Hat/OSV/GHSA entries summarize ...

MAL-2022-3768 Malicious code in identity-cache-persistence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8259c2aadad7b30a1e3d338da740be244e0d875364052d8e41849503366503f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in identity-cache-persistence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8259c2aadad7b30a1e3d338da740be244e0d875364052d8e41849503366503f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in identity-cache-persistence

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Cached content persisting after disabling anonymous access for allowlist URLs - CVE-2021-39113

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions, via a Broken Access Control vulnerability in the allowlist feature. The affected versions are before version 8.13.9, and from version...