5732 matches found
CVE-2025-55797: Improper Access Control
An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/schemaId endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed...
CVE-2025-55797
An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/schemaId endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed...
CVE-2025-55797
An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/schemaId endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed...
PT-2025-40039
An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/schemaId endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed...
CVE-2025-55797
An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/schemaId endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed...
FormCMS security vulnerabilities
FormCMS is a page designer for formcms individual developers. A security vulnerability exists in FormCms version 0.5.4, which stems from improper access control of the /api/schemas/history/schemaId endpoint, which could lead to unauthenticated attackers accessing historical schema data...
CVE-2025-55797
An improper access control vulnerability exists in FormCMS version 0.5.4 within the /api/schemas/history/[schemaId] endpoint. The root cause is insufficient authentication checks , which allows unauthenticated attackers to retrieve sensitive historical schema data if a valid schemaId is known or ...
CVE-2025-55797
An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/schemaId endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed...
PT-2025-40005
Name of the Vulnerable Software and Affected Versions FormCms version 0.5.4 Description An access control issue exists in FormCms version 0.5.4. An unauthenticated attacker can access historical schema data via the /api/schemas/history/schemaId API endpoint if a valid schemaId is known or guessed...
CVE-2025-7104
A mass assignment vulnerability exists in danny-avila/librechat, affecting all versions. This vulnerability allows attackers to manipulate sensitive fields by automatically binding user-provided data to internal object properties or database fields without proper filtering. As a result, any extra...
CVE-2025-7104 Mass Assignment in danny-avila/librechat
A mass assignment vulnerability exists in danny-avila/librechat, affecting all versions. This vulnerability allows attackers to manipulate sensitive fields by automatically binding user-provided data to internal object properties or database fields without proper filtering. As a result, any extra...
CVE-2025-7104 Mass Assignment in danny-avila/librechat
A mass assignment vulnerability exists in danny-avila/librechat, affecting all versions. This vulnerability allows attackers to manipulate sensitive fields by automatically binding user-provided data to internal object properties or database fields without proper filtering. As a result, any extra...
PT-2025-39846
Name of the Vulnerable Software and Affected Versions librechat affected versions not specified Description A mass assignment issue exists that allows manipulation of sensitive fields. Attackers can exploit this by automatically binding user-provided data to internal object properties or database...
CVE-2025-57320
json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...
graphos-cli (>=1.0.0, <=1.0.1) potentially affected by CVE-2025-57320 via json-schema-editor-visual (2.0.0)
json-schema-editor-visual NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on json-schema-editor-visual and may be impacted: - graphos-cli =1.0.0, =1.0.1 Source cves: CVE-2025-57320 Source advisory: OSV:GHSA-3C3P-XH4F-PFH7...
graphos-cli (>=1.0.0, <=1.0.1) potentially affected by CVE-2025-57320 via json-schema-editor-visual (2.0.0)
json-schema-editor-visual NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on json-schema-editor-visual and may be impacted: - graphos-cli =1.0.0, =1.0.1 Source cves: CVE-2025-57320 Source advisory: GHSA-3C3P-XH4F-PFH7...
GHSA-3C3P-XH4F-PFH7 json-schema-editor-visual vulnerable to prototype pollution
json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...
Prototype Pollution
Overview json-schema-editor-visual is a jsonschema editor Affected versions of this package are vulnerable to Prototype Pollution via the setData or deleteData functions. An attacker can manipulate the prototype of objects by supplying a crafted payload, potentially leading to unauthorized...
graphos-cli (>=1.0.0, <=1.0.1), panshi-client (>=0.0.7, <=0.0.8) potentially affected by CVE-2025-57320 via json-schema-editor-visual (>=1.1.1, <=2.0.0)
json-schema-editor-visual NPM version =1.1.1, =1.0.0, =0.0.7, =0.0.8 Source cves: CVE-2025-57320 Source advisory: SNYK:JS-JSONSCHEMAEDITORVISUAL-13110010...
json-schema-editor-visual vulnerable to prototype pollution
json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...