3937 matches found
CVE-2026-91165
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.27.6, the responsemode=formpost SSO return path in warpgate-protocol-http/src/api/ssoproviderlist.rs uses serdejson::tostring inside ReturnToSsoPostResponse without neutralizing a script-closing sequence. The...
CVE-2026-58491
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpgate/api/sso/providers/:name/start endpoint stores an attacker-controlled next parameter that the POST /@warpgate/api/sso/return handler inserts without HTML escaping into the response generated by...
CVE-2026-58491 Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpgate/api/sso/providers/:name/start endpoint stores an attacker-controlled next parameter that the POST /@warpgate/api/sso/return handler inserts without HTML escaping into the response generated by...
EUVD-2026-84059
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpgate/api/sso/providers/:name/start endpoint stores an attacker-controlled next parameter that the POST /@warpgate/api/sso/return handler inserts without HTML escaping into the response generated by...
CVE-2026-58491 Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpgate/api/sso/providers/:name/start endpoint stores an attacker-controlled next parameter that the POST /@warpgate/api/sso/return handler inserts without HTML escaping into the response generated by...
CVE-2026-58491 Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpgate/api/sso/providers/:name/start endpoint stores an attacker-controlled next parameter that the POST /@warpgate/api/sso/return handler inserts without HTML escaping into the response generated by...
CVE-2026-58491
Warpgate (an open-source SSH, HTTPS, and MySQL bastion host for Linux) prior to 0.25.5 is vulnerable to reflected XSS and open redirect in its SSO return endpoint. The root cause is an attacker-controlled next parameter stored at /@warpgate/api/sso/providers/:name/start and inserted without HTML ...
ROOT-APP-NPM-CVE-2024-46982 CVE-2024-46982 in next - Patched by Root
Root has patched CVE-2024-46982 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64644 CVE-2026-64644 in next - Patched by Root
Root has patched CVE-2026-64644 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64643 CVE-2026-64643 in next - Patched by Root
Root has patched CVE-2026-64643 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64646 CVE-2026-64646 in next - Patched by Root
Root has patched CVE-2026-64646 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64648 CVE-2026-64648 in next - Patched by Root
Root has patched CVE-2026-64648 in the next package for Root:npm. Multiple fixed versions available...
PT-2026-96224
Name of the Vulnerable Software and Affected Versions Warpgate versions prior to 0.27.6 Description The SSO return path using response mode=form post in the warpgate-protocol-http/src/api/sso provider list.rs file fails to neutralize script-closing sequences when using serde json::to string insid...
PT-2026-96213
Name of the Vulnerable Software and Affected Versions Warpgate versions prior to 0.25.5 Description The software fails to properly escape the next parameter stored via the '/@warpgate/api/sso/providers/:name/start' endpoint. This value is subsequently inserted without HTML escaping into the...
CVE-2026-91165: Improper Neutralization of Input During Web Page Generation
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.27.6, the responsemode=formpost SSO return path in warpgate-protocol-http/src/api/ssoproviderlist.rs uses serdejson::tostring inside ReturnToSsoPostResponse without neutralizing a script-closing sequence. The...
ROOT-APP-NPM-CVE-2026-64642 CVE-2026-64642 in next - Patched by Root
Root has patched CVE-2026-64642 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-32421 CVE-2025-32421 in next - Patched by Root
Root has patched CVE-2025-32421 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-56332 CVE-2024-56332 in next - Patched by Root
Root has patched CVE-2024-56332 in the next package for Root:npm. Multiple fixed versions available...