10954 matches found
CVE-2026-16770: Improper Neutralization of Argument Delimiters in a Command
PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdfwebkitmetatags and turns each one into a wkhtmltopdf command line...
CVE-2026-19744: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute arbitrary JavaScript in the application origin via a Markdown link whose URL contains a double quote, which closes the anchor's href attribute because the renderer's sanitization...
Arbitrary Code Injection
Overview @prompty/core is a Prompty core package Affected versions of this package are vulnerable to Arbitrary Code Injection via the NunjucksRenderer in nunjucks.ts, which passes user-controlled inputs directly to env.renderString without restricting member access or function calls within the...
EUVD-2026-57382
Prompty is a markdown file format .prompty for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype propertie...
CVE-2026-73299 Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer
Prompty is a markdown file format .prompty for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype propertie...
CVE-2026-73299 Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer
Prompty is a markdown file format .prompty for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype propertie...
SUSE CVE-2026-19557
Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-19173
An out of bounds write flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=538332338 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Securit...
CVE-2026-19557
A flaw was found in the TabStrip component of Chromium. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to escape the browser's sandbox, leading to furthe...
CVE-2026-19144 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19173 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-FF4P-927C-7922 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19169 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-8G9R-MP6V-7M38 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-MH4H-C4W6-M987 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-VC67-62QR-JVWF vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19172 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-2PJC-WR33-2RRG vulnerabilities
Vulnerabilities for packages: chromium...