4852 matches found
NPM: PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset
NPM: PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when from is unset vulnerability discovered by ? in WordPress Npm postcss versions = 8.5.22...
EUVD-2026-52373
PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker can cause PreviousMap.loadFile to read an unintended source-map file by supplying an absolute or directory-traversal...
GHSA-HHF8-3X8G-6PFF vulnerabilities
Vulnerabilities for packages: openjdk...
ROOT-APP-MAVEN-GHSA-72HV-8253-57QQ GHSA-72hv-8253-57qq in io.root.com.fasterxml.jackson.core:jackson-core - Patched by Root
Root has patched GHSA-72hv-8253-57qq in the io.root.com.fasterxml.jackson.core:jackson-core package for Root:Maven. Multiple fixed versions available...
Cacti < 1.2.25 Insecure Deserialization
Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. id: CVE-2023-30534 info: name: Cacti 1.2.25 Insecure Deserialization author: k0pak4 severity: medium description: | Cacti is an open source...
GHSA-X23C-287F-QQV5 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-6R8X-57C9-28J4 vulnerabilities
Vulnerabilities for packages: superset, mlflow...
GHSA-FXF9-RXPJ-26GX vulnerabilities
Vulnerabilities for packages: wget...
GHSA-9F52-RJQV-25QV vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-activemq-fips, apache-nifi-registry, camunda, jenkins, apache-activemq...
GHSA-72PG-X5F8-J25J vulnerabilities
Vulnerabilities for packages: camunda, apache-activemq-fips, apache-activemq, apache-nifi-registry...
ROOT-APP-PYPI-GHSA-6P8H-3WGX-97GF GHSA-6p8h-3wgx-97gf in rootio-GitPython - Patched by Root
Root has patched GHSA-6p8h-3wgx-97gf in the rootio-GitPython package for Root:PyPI. Multiple fixed versions available...
GHSA-XJFQ-6RHW-XJ37 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-FF33-VW52-C9P4 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-JPP9-98P6-WX73 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-724G-MXRG-4QVM vulnerabilities
Vulnerabilities for packages: renovate...
GHSA-64M9-QG9M-54W5 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-54W4-5MRC-HFP8 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-3MWP-7C29-VP5V vulnerabilities
Vulnerabilities for packages: firefox...