7393 matches found
PT-2026-112035
Name of the Vulnerable Software and Affected Versions Dockhand versions prior to 1.0.45 Description An authentication bypass exists because the global auth hook ignores authentication for paths ending in static-asset extensions, such as .js, which includes routes under /api/. Additionally,...
PT-2026-111373
Name of the Vulnerable Software and Affected Versions js-beautify versions 1.x through 1.15.1 js-beautify versions 2.x through 2.0.3 Description A weakness in an unknown function allows for remote execution of a manipulation that can lead to uncontrolled memory allocation, which occurs when a...
DEBIAN-CVE-2026-109563
N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...
CVE-2026-109563
N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...
UBUNTU-CVE-2026-109563
N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...
CVE-2026-109563
N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...
CVE-2026-109563 N3.js before 2.11.1 ReDoS via N3Lexer Numeric-Literal Regex
N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...
EUVD-2026-97886
N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...
CVE-2026-109563
N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...
CVE-2026-109563
The N3.js library, specifically versions before 2.11.1 , is vulnerable to a Regular Expression Denial of Service (ReDoS) . The issue resides in the N3Lexer number pattern, which exhibits quadratic backtracking when processing long runs of digits. An attacker can exploit this by providing untruste...
CVE-2026-109563 N3.js before 2.11.1 ReDoS via N3Lexer Numeric-Literal Regex
N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...
CVE-2026-108897
A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The...
CVE-2026-108897 Smart Media4U Technology SHAREit App WebView JS Bridge syncInvoke routine
A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The...
EUVD-2026-97473
A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The...
CVE-2026-108897
A security vulnerability exists in Smart Media4U Technology SHAREit App 6.27.38_ww on Android. The flaw resides in the syncInvoke function of the WebView JS Bridge component, where manipulation leads to an exposed dangerous routine . This vulnerability can be triggered remotely . While the exploi...
ROOT-APP-NPM-CVE-2026-48068 CVE-2026-48068 in @grpc/grpc-js - Patched by Root
Root has patched CVE-2026-48068 in the @grpc/grpc-js package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-101916 CVE-2026-101916 in @grpc/grpc-js - Patched by Root
Root has patched CVE-2026-101916 in the @grpc/grpc-js package for Root:npm. Multiple fixed versions available...
PT-2026-110939
Name of the Vulnerable Software and Affected Versions N3.js versions prior to 2.11.1 Description A regular expression denial of service issue exists in the N3Lexer number pattern. The flaw causes quadratic backtracking when processing long sequences of digits that do not properly terminate a...
CVE-2026-109563: Inefficient Regular Expression Complexity
N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...
AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1791818373)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791818373 advisory. - Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when...