9700 matches found
CVE-2026-48951
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components...
CVE-2026-48951 Joomla! Core - [20260705] - XSS in various modalreturn layouts
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components...
AIOHTTP vulnerable to brute-force leak of internal static file path components
SummaryPath normalization for static files prevents path traversal, but opens up the ability for an attacker to ascertain theexistence of absolute path components. ImpactIf an application uses web.static not recommended for production deployments, it may be possible for an attacker to ascertain t...
GO-2026-5874 Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components in github.com/rancher/fleet
Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components in github.com/rancher/fleet...
PYSEC-2026-1523 Langflow vulnerable to remote code execution
langflow =1.0.18 is vulnerable to Remote Code Execution RCE as any component provided the code functionality and the components run on the local machine rather than in a sandbox...
Insecure Jinja2 templates rendered in Haystack Components can lead to RCE
ImpactHaystack clients that let their users create and run Pipelines from scratch are vulnerable to remote code executions.Certain Components in Haystack use Jinja2 templates, if anyone can create and render that template on the client machine they run any code. PatchesThe problem has been fixed...
PYSEC-2026-2068 Improper line feed handling in zenml
A denial of service DoS vulnerability exists in zenml-io/zenml version 0.56.3 due to improper handling of line feed \n characters in component names. When a low-privileged user adds a component through the API endpoint api/v1/workspaces/default/components with a name containing a \n character, it...
Malicious code in paypal-legal-components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7337 Malicious code in paypal-legal-components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7098 Malicious code in @trp-ii-ii-component-library/ii-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @trp-ii-ii-component-library/ii-components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7074 Malicious code in @gutierre0x80/ads.components.button (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @gutierre0x80/ads.components.button (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @athena-ui-components/utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7049 Malicious code in @athena-ui-components/utils (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @athena-ui-components/user-activity (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @athena-ui-components/pubsub-bridge (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7047 Malicious code in @athena-ui-components/pubsub-bridge (npm)
--- -= Per source details. Do not edit below this line.=-...