CVE-2026-19873

HTML::FormFu for Perl (versions through 2.08) allows resource exhaustion via an unbounded repeat count in Repeatable elements. When counter_name is set, the process method reads the repeat count from a query string parameter, validates only that it is a positive integer, and deep-clones the eleme...

CVE-2026-32878

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.20 and 8.6.44, an attacker can bypass the default request keyword denylist protection and the class-level permission for adding fields by sending a crafted request that...

Node.js third-party modules: [klona] Prototype pollution

I would like to report Prototype pollution in klona It allows adding arbitrary property to Prototype while deep cloning an object Module module name: klona version: Hunter's comments and funny memes goes here F690469 Impact Denial of Service and possible Remote code execution by overriding object...