13073 matches found
PYSEC-2025-71
Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI. In versions before 5.4.3, the version parameter of the "/docs" endpoint is vulnerable to a Reflected XSS Cross-Site Scripting attack. This XSS would notably allow an attacker to execute JavaScript code ...
CGA-7CCG-JM7Q-GWXV
Bulletin has no description...
CGA-G92C-J3HF-X9FM
Bulletin has no description...
CGA-RHF3-CGM4-5JCG
Bulletin has no description...
CGA-J3Q7-3JFC-2GHC
Bulletin has no description...
CGA-CQC9-MWRX-WC3F
Bulletin has no description...
CGA-QJF7-4CQ7-9V8J
Bulletin has no description...
CGA-556P-55PV-67V6
Bulletin has no description...
GO-2025-3765 SQL injection vulnerability in github.com/uptrace/bun/driver/pgdriver
SQL injection vulnerability in github.com/uptrace/bun/driver/pgdriver...
MAL-2025-6067 Malicious code in @toptal/picasso-utils (npm)
The package communicates with a domain associated with malicious activity...
CGA-C9JV-VGF2-PXH8
Bulletin has no description...
MINI-38VX-Q2F3-PX54
Bulletin has no description...
CVE-2025-51400
A stored cross-site scripting XSS vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...
MAL-2025-6049 Malicious code in @toptal/picasso-grid (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6042 Malicious code in @toptal/picasso-calendar (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6069 Malicious code in @xene/core (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6065 Malicious code in @toptal/picasso-tailwind (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6037 Malicious code in @toptal/davinci-monorepo (npm)
The package communicates with a domain associated with malicious activity...