4 matches found
Updated nodejs packages fix security vulnerabilities
lib,test: redact proxy credentials in tunnel errors. CVE-2026-48615 permission: handle process.chdir on writereport. CVE-2026-48617 tls: normalize hostname for server identity checks. CVE-2026-48618 http2: cap originSet size to prevent unbounded memory growth. CVE-2026-48619 tls: fix case-sensiti...
EUVD-2026-33642
Use of hard-coded credentials in KS-SOMED allowed an unauthorized attacker access to FTP server that hosted the application's update packages. The attacker with these credentials could upload a malicious update file, which then may have been distributed and installed on client machines as a...
PT-2023-28580
Name of the Vulnerable Software and Affected Versions Realia plugin for WordPress versions up to, and including, 1.4.0 Description The issue is due to missing nonce validation on the process change profile form function, making it possible for unauthenticated attackers to change user email via a...
