@contfu/client (0.0.2), @contfu/contfu (>=0.0.3, <=0.0.11) +3 more potentially affected by CVE-2026-39356 via drizzle-orm (1.0.0-beta.19)

drizzle-orm NPM version 1.0.0-beta.19 is affected by a known vulnerability. The following packages have a transitive dependency on drizzle-orm and may be impacted: - @contfu/client 0.0.2 - @contfu/contfu =0.0.3, =0.0.3, =0.0.0, =0.0.4 Source cves: CVE-2026-39356 Source advisory: GHSA-GPJ5-G38J-94...

CVE-2023-31457

A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 22.24.1500.0 and earlier could allow an unauthenticated attacker with internal network access to execute arbitrary scripts due to improper access control...

CVE-2023-31457

The CVE-2023-31457 issue affects Mitel MiVoice Connect—Headquarters server component—with versions 19.3 SP2 (22.24.1500.0) and earlier. It allows an unauthenticated attacker with internal network access to execute arbitrary scripts due to improper access control. If exploited, the impact aligns w...

CVE-2023-31457

A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 22.24.1500.0 and earlier could allow an unauthenticated attacker with internal network access to execute arbitrary scripts due to improper access control...