authkit-nextjs may let session cookies be cached in CDNs

In authkit-nextjs version 2.11.0 and below, authenticated responses do not defensively apply anti-caching headers. In environments where CDN caching is enabled, this can result in session tokens being included in cached responses and subsequently served to multiple users. Next.js applications...

Stored Cross-Site Scripting (XSS)

Liferay Portal is vulnerable to Stored Cross-Site Scripting XSS. The vulnerability is due to improper input validation in the Instance Configuration’s CDN Host HTTP and CDN Host HTTPS text fields, which allows an authenticated instance administrator to inject arbitrary web scripts or HTML into al...

CVE-2025-62966

Missing Authorization vulnerability in Apiki GoCache gocache-cdn allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoCache: from n/a through = 1.3.6...

PT-2025-43838

Missing Authorization vulnerability in Apiki GoCache gocache-cdn allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoCache: from n/a through = 1.3.6...

EUVD-2012-1655

Malware in sbrugna...

EUVD-2012-2897

Malware in sbrugna...

EUVD-2021-1372

Malware in sbrugna...

EUVD-2022-52201

Malicious code in bioql PyPI...

EUVD-2023-24110

Malicious code in bioql PyPI...

EUVD-2024-46480

Malicious code in bioql PyPI...

EUVD-2025-3352

Malicious code in bioql PyPI...

EUVD-2025-21647

Malicious code in bioql PyPI...

EUVD-2025-23911

Malicious code in bioql PyPI...

EUVD-2025-19885

Malicious code in bioql PyPI...

EUVD-2022-5397

Malicious code in bioql PyPI...

EUVD-2024-25124

Malicious code in bioql PyPI...

EUVD-2023-36756

Malicious code in bioql PyPI...

EUVD-2025-19911

Malicious code in bioql PyPI...

EUVD-2023-41763

Malicious code in bioql PyPI...

EUVD-2022-33583

Malicious code in bioql PyPI...