CVE-2026-54162

Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row formatters pass Caddy access-log fields, particularly the request URI, through the fitCellLeft render helper without neutralizing terminal escape or control sequences. An...

CVE-2026-54162 Ember: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUI

Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row formatters pass Caddy access-log fields, particularly the request URI, through the fitCellLeft render helper without neutralizing terminal escape or control sequences. An...

EUVD-2026-112411

Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row formatters pass Caddy access-log fields, particularly the request URI, through the fitCellLeft render helper without neutralizing terminal escape or control sequences. An...

CVE-2026-54162 Ember: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUI

Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row formatters pass Caddy access-log fields, particularly the request URI, through the fitCellLeft render helper without neutralizing terminal escape or control sequences. An...

CVE-2026-54162

The Ember real-time terminal dashboard (prior to v1.4.2 ) contains an unneutralized terminal escape sequence vulnerability (CWE-150 ). The application's interactive TUI row formatters pass fields from Caddy access logs—specifically the request URI —through the fitCellLeft render helper without ne...

CVE-2026-54162 Ember: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUI

Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row formatters pass Caddy access-log fields, particularly the request URI, through the fitCellLeft render helper without neutralizing terminal escape or control sequences. An...

CVE-2026-54162

Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row formatters pass Caddy access-log fields, particularly the request URI, through the "fitCellLeft" render helper without neutralizing terminal escape or control sequences. An...

CVE-2026-103400

An Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbitrary filesystems or cause a denial of...

CVE-2026-103400

A vulnerability exists in the ember service of Juniper Networks Session Smart Router and Session Smart Conductor . The root cause is an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74), where specially named directories can be used during...

CVE-2026-103400 Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup

An Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbitrary filesystems or cause a denial of...

CVE-2026-103400 Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup

An Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbitrary filesystems or cause a denial of...

EUVD-2026-112221

An Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbitrary filesystems or cause a denial of...

Alexandre Daubois Ember input validation error vulnerability

Versions of Alexandre Daubois Ember prior to 1.4.2 contain an input validation error vulnerability. This vulnerability arises because the interactive TUI line formatter fails to neutralize terminal escape sequences or control characters when processing Caddy access log fields—particularly request...

CVE-2026-54162: Improper Neutralization of Escape, Meta, or Control Sequences

Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row formatters pass Caddy access-log fields, particularly the request URI, through the fitCellLeft render helper without neutralizing terminal escape or control sequences. An...

PT-2026-128276

An Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbitrary filesystems or cause a denial of...

Juniper Networks Session Smart Router input validation error vulnerability

A input validation error vulnerability exists in Juniper Networks Session Smart Router and Juniper Networks Session Smart Conductor versions prior to 7.0.5, from 7.1.0 up to but not including 7.1.7, and from 7.2.0 up to but not including 7.2.3. This vulnerability stems from improper handling of...

CVE-2026-103400: Juniper Networks: An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in…

An Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbitrary filesystems or cause a denial of...

CLSA-2026-1792162009 TuxCare security update for @storybook/ember (1 CVE)

TuxCare rebuilt @storybook/ember to address 1 CVE. Fixed in 7.0.7-tuxcare.1...

PT-2026-124477

TuxCare rebuilt @storybook/ember to address 1 CVE. Fixed in 7.0.7-tuxcare.1...

Trigger Value Selection in Clean-Label Malware Backdoors: An Effectiveness-Detectability Analysis

Clean-label backdoor poisoning is a threat to machine learning-based malware classifiers because poisoned samples can be inserted into training data without changing their labels. Previous explanation-guided attacks mainly focus on selecting important trigger features, but the values assigned to...