Lucene search
+L

6 matches found

Snyk
Snyk
•added 2026/10/07 8:32 p.m.•13 views

Use of Cache Containing Sensitive Information

Overview next is a react framework. Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information via cross-request deduplication in the 'use cache' mechanism, where draft mode state is not accounted for when sharing cached fills between concurrent requests. A...

6.3CVSS5.8AI score0.00179EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/02 4:27 p.m.•14 views

Use of Cache Containing Sensitive Information

Overview next is a react framework. Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information via cross-request deduplication in the use-cache-wrapper.ts cache function, where draft mode state is not accounted for when sharing cached fills across concurrent...

6.3CVSS5.8AI score0.00179EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/09/08 11:57 p.m.•14 views

SUSE CVE-2026-85152

undici 8.10.0 omits the destination origin from the cache and request-deduplication keys when the cache or deduplicate interceptor is composed directly onto a Client or Pool. Because the internal cache key falls back to an empty origin string, a cacheable or in-flight response from one upstream...

7.4CVSS6.1AI score0.00164EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/04 12:00 a.m.•5 views

CVE-2026-85152: Origin Validation Error

undici 8.10.0 omits the destination origin from the cache and request-deduplication keys when the cache or deduplicate interceptor is composed directly onto a Client or Pool. Because the internal cache key falls back to an empty origin string, a cacheable or in-flight response from one upstream...

7.4CVSS6.1AI score0.00164EPSS
SaveExploits0References4
osv_go
osv_go
•added 2026/06/25 10:34 p.m.•34 views

GO-2026-5483 OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collision in github.com/openfga/openfga

OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collision in github.com/openfga/openfga...

8.8CVSS8.2AI score0.0027EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/04/07 6:05 p.m.•20 views

OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collision

Description In OpenFGA, under specific conditions, BatchCheck calls with multiple checks sent for the same object, relation, and user combination can result in improper policy enforcement. Am I affected? You are affected if you meet the following preconditions: 1. You execute BatchCheck operation...

8.8CVSS8.1AI score0.0027EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder