Allocation of Resources Without Limits or Throttling

Overview react-server-dom-turbopack is a React Server Components bindings for DOM using Turbopack. This is intended to be integrated into meta-frameworks. It is not intended to be imported directly. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or...

react-server-dom: Denial of Service in Server Functions

Impact A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to out-of-memory exceptions or excessive CPU usage. We recommend updating immediately. The vulnerability exists in versions 19.0.0 through 19.0.7,...

EUVD-2026-46307

react-server-dom: Denial of Service in Server Functions...

@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +52 more potentially affected by CVE-2026-44907 via react-server-dom-webpack (>=19.0.0, <=19.0.1)

react-server-dom-webpack NPM version =19.0.0, =1.1.0, =3.0.0, =1.1.0, =1.1.0, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.0.4, =2.0.3-next.0 an...

NPM: react-server-dom: Denial of Service in Server Functions

NPM: react-server-dom: Denial of Service in Server Functions vulnerability discovered by ? in WordPress Npm react-server-dom-parcel versions = 19.1.0, 19.1.9...

GHSA-WX67-QW84-CM4G react-server-dom: Denial of Service in Server Functions

Impact A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to out-of-memory exceptions or excessive CPU usage. We recommend updating immediately. The vulnerability exists in versions 19.0.0 through 19.0.7,...

GHSA-FRVJ-C5QP-XJ4W open-webui terminal proxy path traversal guard bypass via 9x encoded traversal

AI assistance was used to help inspect the code and prepare this report. Summary The fix for GHSA-r2wg-2mcr-66rv is incomplete in v0.9.6 and current main. backend/openwebui/routers/terminals.py documents sanitizeproxypath as decoding until stable, but the implementation stops after 8 unquote...

CVE-2026-65899 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, wazuh-dashboard, librechat, nextcloud-server, wazuh-dashboard-fips, langfuse-fips, kibana, langfuse...

CVE-2026-65903 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, wazuh-dashboard, librechat, nextcloud-server, opensearch-dashboards-fips, wazuh-dashboard-fips, langfuse-fips, kibana, langfuse...

CVE-2026-65898 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, wazuh-dashboard, librechat, nextcloud-server, opensearch-dashboards-fips, wazuh-dashboard-fips, langfuse-fips, kibana, langfuse...

CVE-2026-65900 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, librechat, nextcloud-server, wazuh-dashboard-fips, langfuse-fips, kibana, langfuse...

CVE-2026-65901 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, librechat, nextcloud-server, wazuh-dashboard-fips, langfuse-fips, kibana, langfuse...

CVE-2026-65902 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, librechat, nextcloud-server, wazuh-dashboard-fips, langfuse-fips, kibana, langfuse...

CVE-2026-65903 vulnerabilities

Vulnerabilities for packages: langfuse, opensearch-dashboards, nextcloud-server...

CVE-2026-65902 vulnerabilities

Vulnerabilities for packages: langfuse, nextcloud-server...

CVE-2026-65899 vulnerabilities

Vulnerabilities for packages: langfuse, opensearch-dashboards, nextcloud-server...

CVE-2026-65898 vulnerabilities

Vulnerabilities for packages: langfuse, nextcloud-server...

CVE-2026-65900 vulnerabilities

Vulnerabilities for packages: langfuse, nextcloud-server...

CVE-2026-65901 vulnerabilities

Vulnerabilities for packages: langfuse, nextcloud-server...

GO-2026-5463 Bettercap has an integer coercion error in modules/mysql_server/mysql_server.go in github.com/bettercap/bettercap

Bettercap has an integer coercion error in modules/mysqlserver/mysqlserver.go in github.com/bettercap/bettercap...