CVE-2026-27953: Improperly Controlled Modification of Dynamically-Determined Object Attributes

ormar is a async mini ORM for Python. Versions 0.23.0 and below are vulnerable to Pydantic validation bypass through the model constructor, allowing any unauthenticated user to skip all field validation by injecting "pkonly": true into a JSON request body. By injecting "pkonly": true into a JSON...

PT-2019-5002

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75 Description The issue is related to insufficient filtering in Blink, allowing a remote attacker to bypass multiple file download protection via a crafted HTML page. This can potentially lead to data...

PT-2019-5003

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75 Description The issue is related to insufficient policy enforcement in Blink, allowing a remote attacker to bypass content security policy via a crafted HTML page. This can potentially lead to data...

PT-2019-5007

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75 Description The issue is related to insufficient input validation in the Chromium browser's user interface, which can be exploited by a remote attacker using a specially crafted HTML page. This can...