10 matches found
ctesiphon (>=0.1.0, <=0.1.17), framefox (>=0.0.11, <=1.1.0) +2 more potentially affected by CVE-2026-55558 via aiosmtplib (4.0.0)
aiosmtplib PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - ctesiphon =0.1.0, =0.0.11, =0.0.2, =0.0.4, =0.0.6 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...
ctesiphon (>=0.1.0, <=0.1.17), framefox (>=0.0.11, <=1.1.0) +2 more potentially affected by CVE-2026-55558 via aiosmtplib (4.0.0)
aiosmtplib PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - ctesiphon =0.1.0, =0.0.11, =0.0.2, =0.0.4, =0.0.6 Source cves: CVE-2026-55558 Source advisory: OSV:GHSA-VXJ7-4XRP-5VR4...
ctesiphon (>=0.1.0, <=0.1.17), framefox (>=0.0.11, <=1.1.0) +2 more potentially affected by CVE-2026-53533 via aiosmtplib (4.0.0)
aiosmtplib PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - ctesiphon =0.1.0, =0.0.11, =0.0.2, =0.0.4, =0.0.6 Source cves: CVE-2026-53533 Source advisory: OSV:PYSEC-2026-2338...
ctesiphon (>=0.1.0, <=0.1.17), framefox (>=0.0.11, <=1.1.0) +2 more potentially affected by CVE-2026-53533 via aiosmtplib (4.0.0)
aiosmtplib PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - ctesiphon =0.1.0, =0.0.11, =0.0.2, =0.0.4, =0.0.6 Source cves: CVE-2026-53533 Source advisory: OSV:GHSA-V3Q9-HJ7J-63HQ...
CVE-2026-58580 LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes
LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginState, updatePluginError, updateTTS and updateTranslate methods filter target rows by message id alone, omitting the userId scope that sibli...
CVE-2017-8102
Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is related to lack of the serendipityeventxsstrust plugin and a setconfig error in that plugin...
Malware in babel-plugin-error-context
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-10951 Malicious code in babel-plugin-error-context (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7744d02644a699ae9c3fbb5c30c579ba65b94f7771206aa8c11b450ab048076f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-48363
In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving truncated files. Eventually there is an assertion failure in libmpdclient because libqtappfw passes in a NULL pointer...