CVE-2026-40864

CVE-2026-40864 — JupyterHub XSRF bypass via cross-origin form POST Sec-Fetch-Mode: no-cors Severity : Medium CVSS 5.4 CWE : CWE-352 — Cross-Site Request Forgery XSRF Affected : jupyterhub 4.1.0 ≤ version posting to a different origin — precisely the classic CSRF vector the token is supposed to...

CVE-2026-128017

FrankenPHP versions prior to 1.13.4 are vulnerable to a double free vulnerability in worker mode . The issue occurs when a worker script ends its loop following a non-form POST request, causing the system to free SG(request_info).content_type_dup twice. Unauthenticated attackers can exploit this ...

CVE-2026-128017 FrankenPHP before 1.13.4 Double Free in Worker Mode via Non-Form POST

FrankenPHP before 1.13.4 contains a double free vulnerability in worker mode that frees SGrequestinfo.contenttypedup twice when a worker script ends its loop after a non-form POST request. Unauthenticated attackers can send repeated JSON POST requests until the worker loop ends, aborting the whol...

CVE-2026-128017 FrankenPHP before 1.13.4 Double Free in Worker Mode via Non-Form POST

FrankenPHP before 1.13.4 contains a double free vulnerability in worker mode that frees SGrequestinfo.contenttypedup twice when a worker script ends its loop after a non-form POST request. Unauthenticated attackers can send repeated JSON POST requests until the worker loop ends, aborting the whol...

CVE-2026-123540 OpenAM before 16.1.4 Incomplete Attribute Encoding in SAML 1.x Form POST

OpenAM before 16.1.4 contains an incomplete output encoding vulnerability that allows a SAML 1.x identity provider to alter attribute values by injecting unencoded content into the service provider auto-submitted form. Attackers controlling a trusted identity provider can craft assertion attribut...

CVE-2026-123540

OpenAM versions prior to 16.1.4 are vulnerable to an incomplete output encoding flaw in SAML 1.x Form POST. This vulnerability allows a trusted identity provider to inject unencoded content into a service provider's auto-submitted form, enabling the modification of assertion attribute names or va...

CVE-2026-123540 OpenAM before 16.1.4 Incomplete Attribute Encoding in SAML 1.x Form POST

OpenAM before 16.1.4 contains an incomplete output encoding vulnerability that allows a SAML 1.x identity provider to alter attribute values by injecting unencoded content into the service provider auto-submitted form. Attackers controlling a trusted identity provider can craft assertion attribut...

CVE-2026-82468

Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation and force victims to...

CVE-2026-82468

Rodauth versions before 2.47.0 contain a cross-site request forgery (CSRF) protection bypass in the JSON request content type validation. An attacker can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation, forcing victims to aut...

CVE-2026-82468 Rodauth before 2.47.0 CSRF Protection Bypass via Content-Type

Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation and force victims to...

CVE-2026-73197

FreeIPA is vulnerable to an unauthenticated denial-of-service via the /ipa/migration/migration.py endpoint. A remote attacker can send oversized form POST requests that force the migration handler to read the full request body into memory, causing memory exhaustion and potential service disruptio...

CVE-2026-73197

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...

MAL-2026-12810 Malicious code in the-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7901c35765e01f25defe0c4d489b8f320340b45968e89b9dafe5821b7561fd The package's main entry ships a self-invoking browser payload that reads document.cookie, base64-encodes the value, and submits it via an auto-creat...

GHSA-FQ9H-C788-FX73 OpenAM has pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)

Summary The OAuth 2.0 / OpenID Connect authorization endpoint does not sufficiently sanitize certain user-supplied parameters before incorporating them into the HTML response generated for the formpost response mode. This may allow an attacker to inject content into the rendered page in the conte...

OpenAM has pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)

Summary The OAuth 2.0 / OpenID Connect authorization endpoint does not sufficiently sanitize certain user-supplied parameters before incorporating them into the HTML response generated for the formpost response mode. This may allow an attacker to inject content into the rendered page in the conte...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the state parameter in the OAuth2 / OIDC formpost response mode. An attacker can execute arbitrary scripts in the context of the user's browser by tricking a user into visiting a crafted authorization endpoi...

PT-2026-51438

Name of the Vulnerable Software and Affected Versions Open Access Management OpenAM versions prior to 16.1.1 Description The OAuth 2.0 and OpenID Connect authorization endpoint fails to sufficiently encode user-supplied parameters, including the state variable, before they are rendered into HTML ...

CVE-2018-25400

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to the ajax/formpost.php endpoint with crafted SQL payloads to extract...

CVE-2018-25400 The Open ISES Project 3.30A SQL Injection via form_post.php

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to the ajax/formpost.php endpoint with crafted SQL payloads to extract...

CVE-2018-25400

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to the ajax/formpost.php endpoint with crafted SQL payloads to extract...