Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/08/01 3:30 p.m.•13 views

Duplicate Advisory: Axios: Nested axios option objects can consume polluted prototype values

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7q8q-rj6j-mhjq. This link is maintained to preserve external references. Original Description axios before 0.33.0 and 1.x before 1.18.0 can consume inherited properties from nested request option objects when th...

6.3CVSS5.6AI score0.00318EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2026/07/14 10:17 p.m.•54 views

CVE-2026-48808

Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but does not forward the current Source to SandboxExtension::checkPropertyAllowed, so SourcePolicyInterface decisions are lost and a template author can read public or magic...

7.5CVSS0.00407EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/07/14 9:27 p.m.•27 views

CVE-2026-48808

Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but does not forward the current Source to SandboxExtension::checkPropertyAllowed, so SourcePolicyInterface decisions are lost and a template author can read public or magic...

7.5CVSS6AI score0.00407EPSS
SaveExploits0
OSV
OSV
•added 2016/12/06 12:00 a.m.•9 views

UBUNTU-CVE-2016-9651

A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS7.7AI score0.11182EPSS
SaveExploits3References4
Rows per page
Query Builder