158 matches found
CVE-2026-33397 Angular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass
The Angular SSR is a server-rise rendering tool for Angular applications. Versions on the 22.x branch prior to 22.0.0-next.2, the 21.x branch prior to 21.2.3, and the 20.x branch prior to 20.3.21 have an Open Redirect vulnerability in @angular/ssr due to an incomplete fix for CVE-2026-27738. Whil...
MAL-2026-2391 Malicious code in ssr-catalogue-sfcc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffd2663232d7c5508f63c063736d09a7c1fdfefe9783f5941c9214f687df7fb The package ssr-catalogue-sfcc was found to contain malicious code...
Malicious code in ssr-catalogue-sfcc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffd2663232d7c5508f63c063736d09a7c1fdfefe9783f5941c9214f687df7fb The package ssr-catalogue-sfcc was found to contain malicious code...
Open Redirect
Overview @angular/ssr is a the Angular server side rendering utilities. Affected versions of this package are vulnerable to Open Redirect via the internal URL processing logic when handling the X-Forwarded-Prefix header. An attacker can cause users to be redirected to arbitrary external domains b...
Malicious code in brisk-web-ssr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca871bc80853efc77cb6ead479434624e2f9b148a1de2dd7a18f5d784c4e1499 The package brisk-web-ssr was found to contain malicious code...
MAL-2026-1664 Malicious code in brisk-web-ssr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca871bc80853efc77cb6ead479434624e2f9b148a1de2dd7a18f5d784c4e1499 The package brisk-web-ssr was found to contain malicious code...
PT-2026-26492
Name of the Vulnerable Software and Affected Versions Angular versions prior to 22.0.0-next.2 Angular versions prior to 21.2.3 Angular versions prior to 20.3.21 Description An Open Redirect issue exists in the Angular SSR tool due to an incomplete fix for a previously identified problem. The...
CVE-2026-27122 Svelte SSR does not validate dynamic element tag names in `<svelte:element>`
svelte performance oriented web framework. Prior to 5.51.5, when using in server-side rendering, the provided tag name is not validated or sanitized before being emitted into the HTML output. If the tag string contains unexpected characters, it can result in HTML injection in the SSR output...
Malicious code in @opposhop/nuxt-ssr-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0f25d8b1dc2ba6e9d88aed207e0f43239c33f2a39958e0bfc7d641c28c2ab5 The package @opposhop/nuxt-ssr-cache was found to contain malicious code. Source: ghsa-malware...
MAL-2026-795 Malicious code in @opposhop/nuxt-ssr-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0f25d8b1dc2ba6e9d88aed207e0f43239c33f2a39958e0bfc7d641c28c2ab5 The package @opposhop/nuxt-ssr-cache was found to contain malicious code. Source: ghsa-malware...
Linux Distros Unpatched Vulnerability : CVE-2025-59057
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - React Router is a router for React. In @remix-run/react versions 1.15.0 through 2.17.0. and react-router versions 7.0.0 through 7.8.2, a XSS vulnerability exist...
CVE-2023-50481
An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js...
PT-2026-2120
Name of the Vulnerable Software and Affected Versions @remix-run/react versions prior to 2.17.3 react-router versions 7.0.0 through 7.11.0 Description React Router, a router for React, contains a cross-site scripting XSS issue within the API when operating in Framework Mode during Server-Side...
MAL-2025-48841 Malicious code in example-ssr (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in example-ssr (npm)
--- -= Per source details. Do not edit below this line.=-...
EUVD-2018-1856
Malware in sbrugna...
EUVD-2018-17658
Malware in sbrugna...
EUVD-2019-9432
Malware in sbrugna...