LabStack Echo input validation error vulnerability

In LabStack Echo versions 4.0.0 through 5.4.0, there is an input validation error vulnerability. This occurs because when Echo.IPExtractor is not configured, the Proxy middleware retains the X-Real-IP header provided by attackers and forwards it to upstream services. As a result, these services m...

HCL BigFix AEX input validation error vulnerability

HCL BigFix AEX version 13.0 contains an input validation error vulnerability. This vulnerability stems from a flaw in the aws-sdk package and may result in AWS API requests being sent to unintended or non-AWS endpoints...

LabStack Echo input validation error vulnerability

A security vulnerability exists in LabStack Echo versions prior to 4.0.0 and 4.16.1, as well as versions prior to 5.0.0 and 5.4.1. This vulnerability arises because the Proxy middleware accepts WebSocket upgrade requests from clients before validating configuration; it selects the original tunnel...

i18next-http-backend input validation error vulnerability

Versions prior to i18next-http-backend 4.0.4 contain an input validation error vulnerability. This flaw arises because interpolateUrl fails to reject &, =, and ; as query separators when inserting unescaped language and namespace values into loadPath or addPath templates. As a result, attackers m...

Progress Software Telerik Document Processing Libraries input validation error vulnerability

Versions of Progress Software Telerik Document Processing Libraries prior to 2026.3.1027 contain an input validation error vulnerability. This vulnerability stems from XML external entity references in SVG image processing, potentially allowing unauthenticated attackers to read local server files...

Highcharts input validation error vulnerability

Highcharts versions 6.1.0 through 11.4.9, 12.0.0 through 12.6.1, and 13.0.0 through 13.1.0 contain an input validation error vulnerability. This vulnerability arises from the failure to sequentially filter the dot-separated paths in series.keys. Attackers can use the proto path to assign any name...

Apache Kafka input validation error vulnerability

Security vulnerabilities exist in Apache Kafka versions 0.10.0.0 through 4.1.2, 4.2.0 through 4.2.1, and 4.3.0 through 4.3.1. These vulnerabilities arise because multiple deserialization paths directly use size or count fields in input to allocate arrays, collections, or byte buffers; no validati...

OpenBSD LibreSSL input validation error vulnerability

OpenBSD LibreSSL versions 4.4.0 and earlier contain an input validation error vulnerability. This vulnerability arises because url2host fails to reject control characters when copying paths, and httpopen incorporates them into POST request lines. Attackers can embed CR/LF sequences within the AIA...

Samba input validation error vulnerability

A vulnerability related to input validation exists in Samba versions 4.25.0 through 4.25.1. This vulnerability stems from an access control bypass in the openat function within the vfscephrgw module. Authenticated users can exploit this by requesting files whose names do not match case, causing t...

Grafana OSS input validation error vulnerability

Security vulnerabilities exist in Grafana OSS versions from 7.4.0 up to 11.6.16, 12.0.0 up to 12.2.10, 12.3.0 up to 12.3.11, 12.4.0 up to 12.4.13, 13.0.0 up to 13.0.11, 13.1.0 up to 13.1.8, and 13.2.0 up to 13.2.4. These vulnerabilities arise because users with the Viewer role can submit speciall...

Grafana Enterprise input validation error vulnerability

Security vulnerabilities exist in Grafana Enterprise versions from 10.0.0 through 11.6.16, 12.0.0 through 12.2.10, 12.3.0 through 12.3.11, 12.4.0 through 12.4.13, 13.0.0 through 13.0.11, 13.1.0 through 13.1.8, and 13.2.0 through 13.2.4. Similarly, security vulnerabilities are present in Grafana O...

LabStack Echo input validation error vulnerability

Versions prior to 4.15.3 and versions 5.0.0 through 5.2.0 of LabStack Echo contain an input validation error vulnerability. This vulnerability arises because middleware.Static performs a secondary decoding on already decoded Request.URL.Path; the encoded delimiter is reconstructed before file...

WordPress Ninja Forms input validation error vulnerability

Versions of WordPress Ninja Forms prior to 3.15.4 contain an input validation error vulnerability. This flaw stems from incomplete server-side validation; unauthenticated attackers can submit arbitrary values via the nfajaxsubmit endpoint to Checkbox List, Multi-Select List, Image List, Country,...

n8n input validation error vulnerability

Versions prior to n8n 2.41.4 and versions 2.42.x prior to 2.42.1 contain an input validation error vulnerability stemming from prototype pollution. Low-privilege users can modify the behavior of built-in objects by saving workflows containing specially crafted connection keys. Attackers can add...

AnkiMCP.ai AnkiMCP Server input validation error vulnerability

AnkiMCP.ai AnkiMCP Server versions prior to 0.21.0 contain a security vulnerability. This vulnerability stems from the default local HTTP listener disabling FastMCP DNS rebinding protection globally. Additionally, no validation is performed for tokens, API keys, session keys, Host, and Origin...

Tanium Comply input validation error vulnerability

Versions prior to Tanium Comply 2.32.263, versions prior to 2.35.323, and versions prior to 2.37.326 contain an input validation error vulnerability stemming from improper output sanitization, which may lead to CSV injection...

Google Chrome input validation error vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain an input validation error vulnerability. This vulnerability stems from improper input validation in the Command component, allowing remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...

Umbraco HQ Umbraco CMS input validation error vulnerability

Umbraco HQ: Versions prior to Umbraco CMS 17.7.2 and from 18.0.0 up to 18.2.2 contain an input validation error vulnerability. This vulnerability arises from Host header pollution, allowing unauthenticated attackers to register OAuth redirect URIs under their control. Once they capture code via...

Parse Platform parse-server input validation error vulnerability

Versions of Parse Platform prior to 8.6.105 and versions prior to 9.10.5-alpha.6 contain an input validation error vulnerability. This vulnerability arises from the lack of validation of object references in $relatedTo queries; using query operators instead of object IDs can bypass object ACL...

MISP Project misp-guard input validation error vulnerability

Versions of MISP prior to misp-guard 1.4 contain a security vulnerability. This vulnerability stems from incomplete validation checks on required taxonomy tags; only one tag is verified against an allowed list, while all tags are not. As a result, highly sensitive data may bypass policy...