authowl (>=0.3.0, <=0.3.12), quicktype (>=26.0.0-pre1, <=26.0.0) +1 more potentially affected by CVE-2026-104183 via stream-json (3.5.0)

stream-json NPM version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on stream-json and may be impacted: - authowl =0.3.0, =26.0.0-pre1, =0.1.0, =0.1.1 Source cves: CVE-2026-104183 Source advisory: GHSA-MJW6-4JJ6-33HC...

GHSA-MJW6-4JJ6-33HC stream-json has a prototype pollution issue: Assembler writes this.current[this.key] on plain objects

Summary A prototype-pollution vulnerability in stream-json lets attacker-controlled JSON replace a parsed object's prototype. Details The streaming JSON parser StreamValues/StreamObject/jsonc variants writes keys via plain assignment, so a proto key replaces the parsed object's prototype with...

EUVD-2026-91057

stream-json has a prototype pollution issue: Assembler writes this.currentthis.key on plain objects...

stream-json has a prototype pollution issue: Assembler writes this.current[this.key] on plain objects

Summary A prototype-pollution vulnerability in stream-json lets attacker-controlled JSON replace a parsed object's prototype. Details The streaming JSON parser StreamValues/StreamObject/jsonc variants writes keys via plain assignment, so a proto key replaces the parsed object's prototype with...

NPM: stream-json has a prototype pollution issue: Assembler writes this.current[this.key] on plain objects

NPM: stream-json has a prototype pollution issue: Assembler writes this.currentthis.key on plain objects vulnerability discovered by ? in WordPress Npm stream-json versions 3.6.0...

authowl (>=0.3.0, <=0.3.12), quicktype (>=26.0.0-pre1, <=26.0.0) +1 more potentially affected by CVE-2026-104183 via stream-json (3.5.0)

stream-json NPM version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on stream-json and may be impacted: - authowl =0.3.0, =26.0.0-pre1, =0.1.0, =0.1.1 Source cves: CVE-2026-104183 Source advisory: OSV:GHSA-MJW6-4JJ6-33HC...

CVE-2026-105748

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.16.0 until 2.131.0, the InputFormat.JSONDOCLING backend in docling/backend/json/doclingjsonbackend.py validates serialized DoclingDocument input without rejecting...

CVE-2026-105676

Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read JSON files outside of the active theme's directory, potentially exposing server configuration secrets. This issue is...

CVE-2026-105676

Ghost, a Node.js content management system , is vulnerable to a path traversal flaw in how it loads theme translation files. Affected versions range from 1.20.0 until 6.64.0 . An authenticated Administrator can exploit this vulnerability to read JSON files outside of the active theme's directory,...

CVE-2026-105676

Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read JSON files outside of the active theme's directory, potentially exposing server configuration secrets. This issue is...

CVE-2026-105676 Ghost: Path Traversal via Locale Setting

Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read JSON files outside of the active theme's directory, potentially exposing server configuration secrets. This issue is...

jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

A flaw was found in jackson-databind, a general-purpose data-binding library for Jackson Data Processor. A remote attacker can exploit this vulnerability by sending deeply nested JSON JavaScript Object Notation data to a service that reads and processes it. This can lead to a Denial of Service Do...

com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser

A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This...

CVE-2026-102295

A cross-site scripting (XSS) vulnerability exists in Quay within the OAuth callback handler (specifically via the oauth local callback format=json parameter). The root cause is improper input sanitization , which allows a remote attacker to execute arbitrary JavaScript in a user's browser by tric...

CVE-2026-102295 Quay: quay: dom-based cross-site scripting via oauth local callback format=json parameter

A flaw was found in Quay. A cross-site scripting XSS vulnerability in the OAuth callback handler allows a remote attacker to execute arbitrary JavaScript code within a user's browser session. By tricking a logged-in user into visiting a specially crafted link, an attacker can exploit improper inp...

VMware vCenter VSAN RCE (CVE-2021-21985)

Exploits CVE-2021-21985 in VMware vCenter: unauthenticated RCE via the VSAN Health Check plugin JSON API Virtual SAN Health Check. !/usr/bin/env python3 -- coding: utf-8 -- """VMware vCenter VSAN Health Check RCE CVE-2021-21985.""" import re from kittysploit import from...

Exploit for CVE-2026-105134

CVE-2026-105134-style OS Command Injection Lab A minimal, sel...

Cross-Site Request Forgery (CSRF)

Apache JSPWiki is vulnerable to JSON Hijacking. The vulnerability is due to insecure handling of JSON responses, where the data can be accessed cross‑origin via a tag and attackers can exploit it to perform CSRF attacks and steal information...

Astra Linux – Vulnerability in node-ajv

The ajv Another JSON Schema Validator before version 8.18.0 is vulnerable to Regular Expression Denial of Service ReDoS when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax $data reference, which is passed directly to the JavaScript RegExp constructor...

Astra Linux – Vulnerability in node-json5

JSON5 is an extension to the popular JSON file format, designed to make it easier to write and maintain manually, especially for configuration files. The parse method in the JSON5 library, as of versions 1.0.1 and 2.2.1, does not restrict the parsing of keys named proto. This allows specially...