831250 matches found
CVE-2026-109829
A flaw was found in undici. When an application configures redirect handling alongside a shared cache, responses received after cross-origin redirects are incorrectly stored under the initial request URL. A remote attacker who controls a redirect destination can exploit this vulnerability to pois...
CVE-2026-109869
A flaw was found in undici. When an application sends a request to a malicious remote server, the server can return a response with excessive content encodings and immediately close the connection. Because the underlying response stream is left unhandled, this abrupt closure triggers an unhandled...
CVE-2026-109383
A flaw was found in undici. This vulnerability may allow a remote attacker to intercept or modify encrypted communications by bypassing custom certificate validation. The issue occurs because the Agent dispatcher discards caller-supplied Transport Layer Security TLS verification functions during...
GHSA-PHV8-WGJP-G4P9 copyparty FTP: upload outside defined volumes (limited path traversal)
The FTP and FTPS server -- if enabled -- would allow uploading to any folder that the copyparty process had permission to write to. The FTP-server is default-disabled, and must be explicitly enabled in the config with global-option ftp or ftps to be affected. Additionally, SFTP was not affected a...
EUVD-2026-97760
copyparty FTP: upload outside defined volumes limited path traversal...
copyparty FTP: upload outside defined volumes (limited path traversal)
The FTP and FTPS server -- if enabled -- would allow uploading to any folder that the copyparty process had permission to write to. The FTP-server is default-disabled, and must be explicitly enabled in the config with global-option ftp or ftps to be affected. Additionally, SFTP was not affected a...
Vitess vttablet /twopcz reflected XSS
From: xylove21 To: [email protected] Subject: Security Report Vitess vttablet /twopcz reflected XSS Date: Tue, 24 Jun 2026 14:30:00 +0800 Summary The twopczHandler in go/vt/vttablet/tabletserver/twopcz.go line 185 reflects the Action and dtid form values directly into the HTML response body via...
EUVD-2026-100525
Vitess vttablet /twopcz reflected XSS...
GHSA-V75V-6FPF-GVW8 Vitess vttablet /twopcz reflected XSS
From: xylove21 To: [email protected] Subject: Security Report Vitess vttablet /twopcz reflected XSS Date: Tue, 24 Jun 2026 14:30:00 +0800 Summary The twopczHandler in go/vt/vttablet/tabletserver/twopcz.go line 185 reflects the Action and dtid form values directly into the HTML response body via...
EUVD-2026-98918
unstructured: Stored XSS via unescaped HTML generation...
GHSA-V5MQ-3XHG-98M9 unstructured: Stored XSS via unescaped HTML generation
Summary When unstructured parses an untrusted document and outputs the result as HTML, malicious markup contained in the document e.g. is left in the output HTML without escaping. When that output is displayed in a browser, the script embedded in the document executes in the viewer's browser...
unstructured: Stored XSS via unescaped HTML generation
Summary When unstructured parses an untrusted document and outputs the result as HTML, malicious markup contained in the document e.g. is left in the output HTML without escaping. When that output is displayed in a browser, the script embedded in the document executes in the viewer's browser...
GHSA-G74G-RG72-J2P3 mise permits untrusted local configuration to override default shell arguments
Summary Untrusted local .mise.toml settings can set the shell interpreter args unix/windows defaultinline / defaultfile shellargs, yielding arbitrary command execution, because those command-interpreter settings were not added to the globalonly denylist the CVE-2026-55448 fix relies on. Code...
EUVD-2026-101154
mise permits untrusted local configuration to override default shell arguments...
mise permits untrusted local configuration to override default shell arguments
Summary Untrusted local .mise.toml settings can set the shell interpreter args unix/windows defaultinline / defaultfile shellargs, yielding arbitrary command execution, because those command-interpreter settings were not added to the globalonly denylist the CVE-2026-55448 fix relies on. Code...
GHSA-MH7X-F8WQ-4JHX kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)
The defect ---------- Confirmed at HEAD f0407d5, v0.144.0. openapi3/loader.go, inside resolveComponent's drill closure around line 455, the case SchemaRef branch for pathPart == "additionalProperties" dereferences c.Value.AdditionalProperties with no nil-check on c.Value: case SchemaRef: if...
kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)
The defect ---------- Confirmed at HEAD f0407d5, v0.144.0. openapi3/loader.go, inside resolveComponent's drill closure around line 455, the case SchemaRef branch for pathPart == "additionalProperties" dereferences c.Value.AdditionalProperties with no nil-check on c.Value: case SchemaRef: if...
GHSA-FH4F-47MF-F2GJ kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path
Summary The openapi3filter.ValidationHandler the exported, documented request-validation middleware hard-wires the legacy router routers/legacy. That router matches the incoming request method verbatim against a trie built exclusively from upper-cased canonical HTTP methods. A request carrying a...
kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path
Summary The openapi3filter.ValidationHandler the exported, documented request-validation middleware hard-wires the legacy router routers/legacy. That router matches the incoming request method verbatim against a trie built exclusively from upper-cased canonical HTTP methods. A request carrying a...