CLSA-2026-1775781170 TuxCare security update for nuxt (1 CVE)

TuxCare rebuilt nuxt to address 1 CVE. Fixed in 0.10.7-tuxcare.1...

Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99)

Summary This is an incomplete fix for GHSA-4gf7-ff8x-hq99. Source code may be stolen during dev when using the webpack / rspack builder if the dev server is bound to a non-loopback address e.g. nuxt dev --host and the developer opens a malicious site on the same network. Details The fix for...

CVE-2026-47200

creationtimestamp| type| source ---|---|--- 2026-05-18 11:08:49+00:00| published-proof-of-concept| https://github.com/nuxt/nuxt/security/advisories/GHSA-hg3f-28rg-4jxj...

CVE-2026-45670

creationtimestamp| type| source ---|---|--- 2026-05-18 11:08:05+00:00| published-proof-of-concept| https://github.com/nuxt/nuxt/security/advisories/GHSA-6m52-m754-pw2g...

CVE-2026-45669

creationtimestamp| type| source ---|---|--- 2026-05-18 11:07:53+00:00| published-proof-of-concept| https://github.com/nuxt/nuxt/security/advisories/GHSA-fx6j-w5w5-h468...

EUVD-2025-8727

Malicious code in bioql PyPI...

CVE-2025-3019

KNIME Business Hub is affected by several cross-site scripting vulnerabilities in its web pages. If a user clicks on a malicious link or opens a malicious web page, arbitrary Java Script may be executed with this user's permissions. This can lead to information loss and/or modification of existin...

CVE-2025-3019 Cross-site scripting vulnerabilities in KNIME Business Hub web pages

KNIME Business Hub is affected by several cross-site scripting vulnerabilities in its web pages. If a user clicks on a malicious link or opens a malicious web page, arbitrary Java Script may be executed with this user's permissions. This can lead to information loss and/or modification of existin...

CVE-2025-3019 Cross-site scripting vulnerabilities in KNIME Business Hub web pages

KNIME Business Hub is affected by several cross-site scripting vulnerabilities in its web pages. If a user clicks on a malicious link or opens a malicious web page, arbitrary Java Script may be executed with this user's permissions. This can lead to information loss and/or modification of existin...

PT-2025-13669 · Unknown +1 · Nuxt-Security +1

Name of the Vulnerable Software and Affected Versions: KNIME Business Hub versions prior to 1.12.4 KNIME Business Hub versions prior to 1.13.3 Description: The issue is caused by a bug in the widely used nuxt-security module, which leads to cross-site scripting vulnerabilities in KNIME Business...

CVE-2025-3019: Improper Neutralization of Input During Web Page Generation

KNIME Business Hub is affected by several cross-site scripting vulnerabilities in its web pages. If a user clicks on a malicious link or opens a malicious web page, arbitrary Java Script may be executed with this user's permissions. This can lead to information loss and/or modification of existin...