913 matches found
GHSA-MM7P-FCC7-PG87 Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict
The email parsing library incorrectly handles quoted local-parts containing @. This leads to misrouting of email recipients, where the parser extracts and routes to an unintended domain instead of the RFC-compliant target. Payload: "[email protected] x"@internal.domain Using the following code to...
Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict
The email parsing library incorrectly handles quoted local-parts containing @. This leads to misrouting of email recipients, where the parser extracts and routes to an unintended domain instead of the RFC-compliant target. Payload: "[email protected] x"@internal.domain Using the following code to...
EUVD-2007-1897
Malware in sbrugna...
EUVD-2018-15669
Malware in sbrugna...
EUVD-2018-15671
Malware in sbrugna...
Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
Summary Rack::Multipart::Parser can accumulate unbounded data when a multipart part’s header block never terminates with the required blank line CRLFCRLF. The parser keeps appending incoming bytes to memory without a size cap, allowing a remote attacker to exhaust memory and cause a denial of...
EUVD-2024-29837
Malicious code in bioql PyPI...
EUVD-2022-44409
Malicious code in bioql PyPI...
EUVD-2022-44410
Malicious code in bioql PyPI...
EUVD-2023-0392
Malicious code in bioql PyPI...
EUVD-2023-32525
Malicious code in bioql PyPI...
EUVD-2024-2960
Malicious code in bioql PyPI...
EUVD-2022-44423
Malicious code in bioql PyPI...
EUVD-2025-16956
Malicious code in bioql PyPI...
EUVD-2025-25186
Malicious code in bioql PyPI...
EUVD-2023-32526
Malicious code in bioql PyPI...
EUVD-2023-32522
Malicious code in bioql PyPI...
EUVD-2023-37232
Malicious code in bioql PyPI...