329 matches found
gorilla
gorilla gorilla is the ultimate wordlist tool packing a lot of amazing utilities like: building wordlists based on patterns like crunch building wordlists based on common password/username formats like cupp scrap a web page and build a wordlist from its words like cewl extending existing wordlist...
CLSA-2026-1792162104 TuxCare security update for @medplum/health-gorilla-react (1 CVE)
TuxCare rebuilt @medplum/health-gorilla-react to address 1 CVE. Fixed in 3.3.1-tuxcare.2...
CLSA-2026-1792162080 TuxCare security update for @medplum/health-gorilla-core (1 CVE)
TuxCare rebuilt @medplum/health-gorilla-core to address 1 CVE. Fixed in 3.3.1-tuxcare.2...
PT-2026-124552
TuxCare rebuilt @medplum/health-gorilla-react to address 1 CVE. Fixed in 3.3.1-tuxcare.2...
UBUNTU-CVE-2026-100351
kin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.ValidationHandler validates an operation selected from decoded URL.Path while a downstream gorilla/mux router configured with UseEncodedPath can dispatch a different operation selected from...
PT-2026-124535
TuxCare rebuilt @medplum/health-gorilla-core to address 1 CVE. Fixed in 3.3.1-tuxcare.2...
CVE-2026-100351
kin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.ValidationHandler validates an operation selected from decoded URL.Path while a downstream gorilla/mux router configured with UseEncodedPath can dispatch a different operation selected from...
CVE-2026-100351 kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion
kin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.ValidationHandler validates an operation selected from decoded URL.Path while a downstream gorilla/mux router configured with UseEncodedPath can dispatch a different operation selected from...
CVE-2026-100351
The kin-openapi Go project (versions 0.144.0 through 0.147.0 ) contains a security requirement bypass in the openapi3filter.ValidationHandler . The vulnerability stems from an interpretation conflict: the handler validates operations based on the decoded URL.Path , while a downstream gorilla/mux ...
CVE-2026-100351 kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion
kin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.ValidationHandler validates an operation selected from decoded URL.Path while a downstream gorilla/mux router configured with UseEncodedPath can dispatch a different operation selected from...
CVE-2026-100351
kin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.ValidationHandler validates an operation selected from decoded URL.Path while a downstream gorilla/mux router configured with UseEncodedPath can dispatch a different operation selected from...
CVE-2026-100351 kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion
kin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.ValidationHandler validates an operation selected from decoded URL.Path while a downstream gorilla/mux router configured with UseEncodedPath can dispatch a different operation selected from...
CVE-2026-100351
kin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.ValidationHandler validates an operation selected from decoded URL.Path while a downstream gorilla/mux router configured with UseEncodedPath can dispatch a different operation selected from...
Malicious code in larch-gorilla-n0m6 (npm)
The package larch-gorilla-n0m6 was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in kelp-gorilla-eaa530-project (npm)
The package kelp-gorilla-eaa530-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in jewel-gorilla-sui317-project (npm)
The package jewel-gorilla-sui317-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in icicle-gorilla-nav513-project (npm)
The package icicle-gorilla-nav513-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in iceberg-gorilla-igfp (npm)
The package iceberg-gorilla-igfp was found to contain malicious code. --- Credit: OpenSSF source...