MINI-Q24R-C8JM-92QM

Bulletin has no description...

MINI-WQQQ-XMPM-96FC

Bulletin has no description...

MINI-GW27-3G8F-P28Q

Bulletin has no description...

MINI-HM5W-9297-4W8J

Bulletin has no description...

MINI-68RW-CC4V-5833

Bulletin has no description...

MINI-CRRX-R358-G7JH

Bulletin has no description...

GHSA-3FC8-8HP6-6JR4 Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS

The ImageColumn and ImageEntry components render raw database values without escaping HTML. Where the data passed to these components isn't validated, an attacker could plant malicious HTML or JavaScript and achieve stored XSS that executes for users who view the table or schema...

CVE-2026-53622

Traefik is an HTTP reverse proxy and load balancer. Versions prior to 3.7.3, 3.6.18, and 2.11.51 have a critical vulnerability in Traefik's HTTP/3 QUIC TLS configuration selection that allows unauthenticated clients to bypass router-specific mTLS enforcement. When HTTP/3 is enabled on an...

Malicious code in analysis-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ab4349bcc1e8f4434817d242b136f6e6050d4acb234aa833d81ffd74942066 The package's postinstall hook install-hook.js, invoked via package.json scripts.postinstall fetches an opaque binary 'payload.bin' from...

MINI-9F9X-FRRG-QGRC

Bulletin has no description...

MINI-M74X-VFW5-FFM8

Bulletin has no description...

MINI-G99F-6M43-9JMJ

Bulletin has no description...

ECHO-2791-8592-919C

Bulletin has no description...

MINI-C3FF-R9VV-6CP3

Bulletin has no description...

MINI-WG36-8VCM-458V

Bulletin has no description...

MINI-RC28-8W32-GCMV

Bulletin has no description...

CVE-2026-10645

The Zephyr ext2 filesystem driver subsys/fs/ext2 trusted the on-disk directory entry fields dereclen and denamelen when walking a directory block. ext2fetchdirentry guarded only with denamelen EXT2MAXFILENAME, but denamelen is a uint8t and EXT2MAXFILENAME is 255, so the check is always false; the...

EUVD-2026-38408

Zephyr's ext2 directory-entry parser does not fully validate on-disk directory entry structure before copying the entry name and advancing traversal state. In ext2fetchdirentry subsys/fs/ext2/ext2diskops.c, the code only checks denamelen = EXT2MAXFILENAME and then copies the name with memcpy...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the ImageColumn or ImageEntry components rendering raw database values without escaping HTML. An attacker can execute arbitrary HTML or JavaScript in the context of affected users by injecting malicious...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the ImageColumn or ImageEntry components rendering raw database values without escaping HTML. An attacker can execute arbitrary HTML or JavaScript in the context of affected users by injecting malicious...