CVE-2023-53446 PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free

In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free Struct pcielinkstate-downstream is a pointer to the pcidev of function 0. Previously we retained that pointer when removing function 0, and subsequent ASPM...

Cross-Site Scripting (XSS)

express-state is vulnerable to cross-site scriptingXSS. User input is not encoded before serialization and passed to expose. This allows an attacker to inject arbitrary Javascript into a victim's browser to steal session cookies or perform unwanted actions on behalf of the user...