12 matches found
GHSA-W9WP-H8WV-79JX vulnerabilities
Vulnerabilities for packages: parseable, deno, mountpoint-s3, linkerd2-proxy...
CVE-2026-48504 vulnerabilities
Vulnerabilities for packages: parseable, deno, mountpoint-s3, linkerd2-proxy...
GHSA-Q2QQ-HMJ6-3WPP vulnerabilities
Vulnerabilities for packages: linkerd2-proxy, shadowsocks-rust, vector, ztunnel, deno...
GHSA-Q2QQ-HMJ6-3WPP vulnerabilities
Vulnerabilities for packages: ztunnel, linkerd2-proxy, vector, ztunnel-fips, shadowsocks-rust, komodo, deno...
GHSA-XP3W-R5P5-63RR vulnerabilities
Vulnerabilities for packages: sqlx, sdp-k8s-injector, rustls-openssl-client, valkey-ldap, guestproxyagent, typst, sccache, rustup, vector, ztunnel-fips, rpm-sequoia, komodo, sentry-cli, bootc, deno...
CVE-2023-26103
Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service ReDoS due to the upgradeWebSocket function, which contains regexes in the form of /s,s/, used for splitting the Connection/Upgrade header. A specially crafted Connection/Upgrade header can be used to...
GHSA-H97M-WW89-6JMQ vulnerabilities
Vulnerabilities for packages: geckodriver, nushell, oranda, wizer, starship, rye, qdrant, kdash, zellij, wasmtime, rustup, samply, atuin, lychee, shadowsocks-rust, linkerd2, buck2, cargo-audit, wadm, parseable, tealdeer, rust-analyzer, pixi, convco, bat, wasmcloud, netavark, linkerd2-proxy, wash,...
CVE-2024-12224 vulnerabilities
Vulnerabilities for packages: geckodriver, nushell, oranda, wizer, starship, rye, qdrant, kdash, zellij, wasmtime, rustup, samply, atuin, lychee, shadowsocks-rust, linkerd2, buck2, cargo-audit, wadm, parseable, tealdeer, rust-analyzer, pixi, convco, bat, wasmcloud, netavark, linkerd2-proxy, wash,...
Design/Logic Flaw
Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service ReDoS due to the upgradeWebSocket function, which contains regexes in the form of /s,s/, used for splitting the Connection/Upgrade header. A specially crafted Connection/Upgrade header can be used to...
CVE-2023-26103
Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service ReDoS due to the upgradeWebSocket function, which contains regexes in the form of /s,s/, used for splitting the Connection/Upgrade header. A specially crafted Connection/Upgrade header can be used to...
CVE-2023-26103
Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service ReDoS due to the upgradeWebSocket function, which contains regexes in the form of /s,s/, used for splitting the Connection/Upgrade header. A specially crafted Connection/Upgrade header can be used to...
Sensitive data exposure in NATS
Preview versions of two NPM packages and one Deno package from the NATS project contain an information disclosure flaw, leaking options to the NATS server; for one package, this includes TLS private credentials. The connection configuration options in these JavaScript-based implementations were...