PT-2026-57647

Name of the Vulnerable Software and Affected Versions will-moss Isaiah versions prior to 1.37.0 Description A flaw in the Master Websocket Handler component allows remote attackers to bypass authorization. The issue exists within the Server.Handle function located in the app/server/server/server....

GHSA-MH2X-FCQH-FMQV @sveltejs/kit has unescaped error message included on error page

Summary The static error.html template for errors contains placeholders that are replaced without escaping the content first. Details From https://kit.svelte.dev/docs/errors: error.html is the page that is rendered when everything else fails. It can contain the following placeholders:...