507 matches found
authkit-nextjs may let session cookies be cached in CDNs
In authkit-nextjs version 2.11.0 and below, authenticated responses do not defensively apply anti-caching headers. In environments where CDN caching is enabled, this can result in session tokens being included in cached responses and subsequently served to multiple users. Next.js applications...
Stored Cross-Site Scripting (XSS)
Liferay Portal is vulnerable to Stored Cross-Site Scripting XSS. The vulnerability is due to improper input validation in the Instance Configuration’s CDN Host HTTP and CDN Host HTTPS text fields, which allows an authenticated instance administrator to inject arbitrary web scripts or HTML into al...
CVE-2025-62966
Missing Authorization vulnerability in Apiki GoCache gocache-cdn allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoCache: from n/a through = 1.3.6...
PT-2025-43838
Missing Authorization vulnerability in Apiki GoCache gocache-cdn allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoCache: from n/a through = 1.3.6...
EUVD-2012-1655
Malware in sbrugna...
EUVD-2012-2897
Malware in sbrugna...
EUVD-2021-1372
Malware in sbrugna...
EUVD-2022-52201
Malicious code in bioql PyPI...
EUVD-2023-24110
Malicious code in bioql PyPI...
EUVD-2024-46480
Malicious code in bioql PyPI...
EUVD-2025-3352
Malicious code in bioql PyPI...
EUVD-2025-21647
Malicious code in bioql PyPI...
EUVD-2025-23911
Malicious code in bioql PyPI...
EUVD-2025-19885
Malicious code in bioql PyPI...
EUVD-2022-5397
Malicious code in bioql PyPI...
EUVD-2024-25124
Malicious code in bioql PyPI...
EUVD-2023-36756
Malicious code in bioql PyPI...
EUVD-2025-19911
Malicious code in bioql PyPI...