68 matches found
quasar-app-webpack-json5-vulnerability
Quasar App quasar-app-webpack-json5-vulnerability A Quasar Project Install the dependencies yarn or npm install Start the app in development mode hot-code reloading, error reporting, etc. quasar dev Lint the files yarn lint or npm run lint Format the files yarn format or npm run format Build the...
ROOT-APP-NPM-CVE-2022-46175 CVE-2022-46175 in json5 - Patched by Root
Root has patched CVE-2022-46175 in the json5 package for Root:npm. Multiple fixed versions available...
Injection json5 Dependency in Jira Software Data Center
This High severity Injection vulnerability was introduced in versions 9.15.2, 9.16.0, 9.17.0, 10.3.23, and 11.3.8 of Jira Software Data Center. This Injection vulnerability, with a CVSS Score of 8.8 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H allows an authenticated attacker...
Injection json5 Dependency in Jira Service Management Data Center
This High severity Injection vulnerability was introduced in versions 10.3.23, and 11.3.8 of Jira Service Management Data Center. This Injection vulnerability, with a CVSS Score of 8.8 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H allows an authenticated attacker to modify the...
CLSA-2026-1780879895 TuxCare security update for json5 (1 CVE)
TuxCare rebuilt json5 to address 1 CVE. Fixed in 1.0.1-tuxcare.1...
CLSA-2026-1777077480 TuxCare security update for json5 (1 CVE)
TuxCare rebuilt json5 to address 1 CVE. Fixed in 1.0.2-tuxcare.5...
CLSA-2026-1773015271 TuxCare security update for json5 (1 CVE)
TuxCare rebuilt json5 to address 1 CVE. Fixed in 0.4.0-tuxcare.1...
PT-2026-74581
TuxCare rebuilt json5 to address 1 CVE. Fixed in 1.0.2-tuxcare.5...
PT-2026-73894
TuxCare rebuilt json5 to address 1 CVE. Fixed in 0.4.0-tuxcare.1...
PT-2026-74967
TuxCare rebuilt json5 to address 1 CVE. Fixed in 1.0.1-tuxcare.1...
PT-2026-74000
TuxCare rebuilt json5 to address 1 CVE. Fixed in 0.5.1-tuxcare.1...
CVE-2026-50733 Markdown Preview Enhanced Arbitrary Code Execution via WaveDrom eval()
Markdown Preview Enhanced before 0.8.28 parses WaveDrom diagrams by evaluating untrusted markdown content with eval, allowing arbitrary JavaScript execution. The flaw affects every render path - the live preview window.eval and presentation mode plus HTML export the bundled WaveDrom.ProcessAll/ev...
CVE-2026-49493 Markdown Preview Enhanced Arbitrary Code Execution via Bitfield interpretJS()
Markdown Preview Enhanced before 0.8.28 parses Bitfield fenced code blocks with interpretJS, which evaluates the block content as code via vm.runInNewContext, allowing arbitrary code execution. A crafted markdown document containing a malicious bitfield code block executes attacker-controlled cod...
CVE-2026-49493
Markdown Preview Enhanced prior to 0.8.28 runs Bitfield fenced code blocks containing interpretJS(), which evaluates code via vm.runInNewContext(), enabling arbitrary server-side code execution when rendering or exporting a document. The issue’s root cause is that Bitfield definitions were treate...
CVE-2026-49493 Markdown Preview Enhanced Arbitrary Code Execution via Bitfield interpretJS()
Markdown Preview Enhanced before 0.8.28 parses Bitfield fenced code blocks with interpretJS, which evaluates the block content as code via vm.runInNewContext, allowing arbitrary code execution. A crafted markdown document containing a malicious bitfield code block executes attacker-controlled cod...
Azure Linux 3.0 Security Update: python-tensorboard (CVE-2022-46175)
The version of python-tensorboard installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-46175 advisory. - JSON5 is an extension to the popular JSON file format that aims to be easier to write and mainta...
RUSTSEC-2025-0120 json5 crate is unmaintained
The json5 crate is no longer actively maintained. If you rely on this crate, consider switching to a recommended alternative. Recommended alternatives - serdejson5 - jsonc-parser - json-five...
PT-2025-48160
The json5 crate is no longer actively maintained. If you rely on this crate, consider switching to a recommended alternative. Recommended alternatives - serde json5 - jsonc-parser - json-five...
Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Data Management Console( CVE-2022-1471,CVE-2024-22259,CVE-2020-8565, CVE-2019-11250,CVE-2023-44487,CVE-2022-46175, CVE-2024-22243)
Summary SnakeYaml Constructor Deserialization Remote Code Execution. Spring-web-6.0.11, k8s.io-client-go, k8s.io-Apimachinery-v0.25.1, json5-1.0.1, spring-web-6.0.11 open source libraries are used by IBM Db2 Data Management Console . This bulletin describes the upgrades necessary to address the...