Lucene search
K

7 matches found

Snyk
Snyk
added 2026/06/15 4:51 p.m.6 views

Cross-site Scripting (XSS)

Overview @angular/core is a package that lets you write client-side web applications as if you had a smarter browser. It also lets you use HTML as your template language and lets you extend HTML’s syntax to express your application’s components clearly and succinctly. Affected versions of this...

6.1CVSS5.8AI score0.00238EPSS
Exploits0References2
NVD
NVD
added 2025/12/16 12:16 a.m.9 views

CVE-2025-66407

Weblate is a web based localization tool. The Create Component functionality in Weblate allows authorized users to add new translation components by specifying both a version control system and a source code repository URL to pull from. However, prior to version 5.15, the repository URL field is...

5CVSS0.00182EPSS
Exploits0References3
PyPA
PyPA
added 2025/12/16 12:16 a.m.10 views

PYSEC-2025-231

Weblate is a web based localization tool. The Create Component functionality in Weblate allows authorized users to add new translation components by specifying both a version control system and a source code repository URL to pull from. However, prior to version 5.15, the repository URL field is...

5CVSS5.9AI score0.00182EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2025/12/16 12:16 a.m.6 views

PYSEC-2025-231

Weblate is a web based localization tool. The Create Component functionality in Weblate allows authorized users to add new translation components by specifying both a version control system and a source code repository URL to pull from. However, prior to version 5.15, the repository URL field is...

5CVSS5.9AI score0.00182EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.3 views

Weblate 跨站请求伪造漏洞

Weblate is a Copyleft open source web-based free software continuous localization system. A cross-site request forgery vulnerability exists in Weblate versions prior to 5.15, which stems from an unvalidated or uncleaned repository URL field in the Create Component function, and could lead to...

5CVSS6.4AI score0.00182EPSS
Exploits0References4
OSV
OSV
added 2025/12/15 11:36 p.m.5 views

CVE-2025-66407 Weblate has Server-Side Request Forgery vulnerability

Weblate is a web based localization tool. The Create Component functionality in Weblate allows authorized users to add new translation components by specifying both a version control system and a source code repository URL to pull from. However, prior to version 5.15, the repository URL field is...

5CVSS6.4AI score0.00182EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/12/15 11:36 p.m.4 views

CVE-2025-66407 Weblate has Server-Side Request Forgery vulnerability

Weblate is a web based localization tool. The Create Component functionality in Weblate allows authorized users to add new translation components by specifying both a version control system and a source code repository URL to pull from. However, prior to version 5.15, the repository URL field is...

5CVSS6.1AI score0.00182EPSS
Exploits0References3
Rows per page
Query Builder