37392 matches found
Cross-site Scripting (XSS)
Overview local-deep-research is an AI-powered research assistant with deep, iterative analysis using LLMs and web searches Affected versions of this package are vulnerable to Cross-site Scripting XSS via the PDFService.markdowntohtml function. An attacker can cause the server to make unauthorized...
MINI-QQMH-W2F9-CGH2
Bulletin has no description...
MINI-35WF-F2WQ-Q2H5
Bulletin has no description...
MINI-2WP2-J2CX-MCCX
Bulletin has no description...
MINI-XV7F-HC5M-WW72
Bulletin has no description...
MINI-7W6H-63QF-6FWF
Bulletin has no description...
MINI-G2RP-FCH9-G6CG
Bulletin has no description...
MINI-QCC6-H659-QHMF
Bulletin has no description...
MINI-FFQC-89JC-QJXH
Bulletin has no description...
MINI-WQ8M-FP33-6WRQ
Bulletin has no description...
MINI-93H8-49MH-758Q
Bulletin has no description...
MINI-6258-82J5-62R6
Bulletin has no description...
MINI-5QFH-4582-PF3H
Bulletin has no description...
CVE-2026-42871 WeGIA: Error Handling familiar_docfamiliar
WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, atendido/familiardocfamiliar.php displays an overly descriptive error message, including database-related details. This verbosity leads to information disclosure, which could assist a potential attacker in mapping the...
UBUNTU-CVE-2026-7210
xml.parsers.expat and xml.etree.ElementTree use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch...
Improper Validation of Specified Quantity in Input
Overview oxidize-pdf is a Python bindings for oxidize-pdf — generate, parse, split, merge, and manipulate PDF files Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via the emission of non-finite color values in the content stream. An attacker...
GHSA-88Q9-CMP2-C2VQ oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS)
Impact oxidize-pdf defines Color as a pub enum with public tuple-struct variants Rgbf64, f64, f64, Grayf64, and Cmykf64, f64, f64, f64. The constructors Color::rgb, Color::gray, and Color::cmyk clamp incoming components to 0.0, 1.0, but because the variants are pub, callers can construct values...
MINI-RP6C-GJ23-FWP2
Bulletin has no description...