CVE-2025-47943

CVE-2025-47943 affects Gogs (self-hosted Git service). The vulnerability is a stored XSS in the PDF rendering path, caused by an outdated pdfjs-1.4.20 component located under public/plugins/. Affected versions are 0.14.0+dev and prior. The issue has been fixed in gogs.io/gogs with version 0.13.3 ...

PT-2026-31498

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description A flaw in policy enforcement within the browser's user interface allowed a remote attacker who had already compromised the renderer process to manipulate the Omnibox URL bar by presenti...

GHSA-G5HG-P3PH-G8QG vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

CVE-2025-48997 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

CVE-2025-48997 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

GHSA-G5HG-P3PH-G8QG vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

GHSA-4PG4-QVPC-4Q3H vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

GHSA-44FP-W29J-9VJ5 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

CVE-2025-47944 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

CVE-2025-47935 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

CVE-2025-47935 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

CVE-2025-47944 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

GHSA-44FP-W29J-9VJ5 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

GHSA-4PG4-QVPC-4Q3H vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

CVE-2024-36527

puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol to read sensitive information from the server...

CVE-2024-23642

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting XSS vulnerability exists in versions prior to 2.23.4 and 2.24.1 that enables an authenticated administrator with workspace-level privileges to store a...

CVE-2024-11114

Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-5473

Use after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Low...

CVE-2023-43799

Altair is a GraphQL Client. Prior to version 5.2.5, the Altair GraphQL Client Desktop Application does not sanitize external URLs before passing them to the underlying system. Moreover, Altair GraphQL Client also does not isolate the context of the renderer process. This affects versions of the...

Malicious code in com.unity.xr-line-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 688c31fe545231e784aa21aa3349d80f9a04b02f893a52510f1be2216609f80f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...