CVE-2026-19765 eyaushev swagger-testcase-mcp fetch_swagger swagger-parser.ts loadSource server-side request forgery

A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerability affects the function loadSource of the file src/utils/swagger-parser.ts of the component fetchswagger. Performing a manipulation results in server-side request forgery...

CVE-2026-19765

The CVE affects eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5, specifically the fetch_swagger component and its loadSource function in src/utils/swagger-parser.ts. A manipulation allows server-side request forgery (SSRF) and can be exploited remotely. The description note...

ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function

The ReDoS can be exploited through the parseHTML function in the html-parser.ts file. This flaw allows attackers to slow down the application by providing specially crafted input that causes inefficient processing of regular expressions, leading to excessive resource consumption. To demonstrate...

GHSA-5J4C-8P2G-V4JX ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function

The ReDoS can be exploited through the parseHTML function in the html-parser.ts file. This flaw allows attackers to slow down the application by providing specially crafted input that causes inefficient processing of regular expressions, leading to excessive resource consumption. To demonstrate...

CVE-2024-9506

A flaw was found in Vue.js. Within the parseHTML function of html-parser.ts, there is a regular expression regex to check for proper closing tags for HTML. However, due to an improperly written regex, when you pass a script containing long text, it will trigger a regular expression denial of...