PT-2026-37234

Name of the Vulnerable Software and Affected Versions Jupyter Server versions prior to 2.18.0 Description Origin header validation uses the re.match function to check incoming origins against the allow origin pat configuration value. Because re.match only anchors at the start of the string and do...

PT-2015-4233

Name of the Vulnerable Software and Affected Versions MediaWiki versions 1.2x through 1.22.14 MediaWiki versions 1.23.x through 1.23.7 MediaWiki versions 1.24.x through 1.24.0 Description The issue allows remote attackers to bypass CORS restrictions in $wgCrossSiteAJAXdomains via a domain that ha...