37 matches found
PT-2026-51019
Name of the Vulnerable Software and Affected Versions YARD versions prior to 0.9.44 Description YARD is a documentation generation tool for the Ruby programming language. The static cache lookup reads a request path before the router's path cleanup process occurs. When a server is configured with...
CVE-2026-49342: Improper Limitation of a Pathname to a Restricted Directory
YARD is a documentation generation tool for the Ruby programming language. Prior to version 0.9.44, YARD's static cache lookup reads a request path before the router's path cleanup runs. When a server is configured with a document root, a traversal path such as /../yard-cache-secret.html is joine...
CVE-2026-41007: Allocation of Resources Without Limits or Throttling
Spring HATEOAS maintains an unbounded static cache of StringLinkRelation instances keyed on attacker-supplied strings. Affected versions: Spring HATEOAS 1.5.0 through 1.5.6; 2.3.0 through 2.3.4; 2.4.0 through 2.4.1; 2.5.0 through 2.5.2; 3.0.0 through 3.0.3...
@njt-tools-open/lang-manage (>=0.0.0, <=2.0.6), @seal5545/cnpmjs.org (3.0.0-rc.43) +49 more potentially affected by unknown CVE via koa-static-cache (>=1.0.4, <=4.0.0)
koa-static-cache NPM version =1.0.4, =0.0.0, =0.0.9-beta.1, =0.1.2-alpha.1, =0.0.3, =0.0.1, =1.0.10, =0.0.0-alpha.0, =0.3.0, =0.0.8, =1.0.2, =0.2.0, =0.2.1 and more Source cves: unknown CVE Source advisory: MEND:WS-2017-0267...
WS-2017-0267
Affected versions before 4.1.1, and 5.0.0 before 5.1.1 of the koa-static-cache package are vulnerable to Directory Traversal...
Important: Red Hat Security Advisory: JBoss EAP XP 5.0 Update 4.0 release. See references for release notes.
JBoss EAP XP 5.0 Update 4.0 release. See references for release notes. JBoss EAP XP 5.0 Update 4.0 GA release. See references for release notes. Security Fixes: vertx-core: static handler component cache can be manipulated to deny the access to static files eapxp-5 CVE-2026-1002 netty-codec:...
EUVD-2025-7947
Malicious code in bioql PyPI...
CVE-2025-30568
Cross-Site Request Forgery CSRF vulnerability in hitoy Super Static Cache super-static-cache allows Cross Site Request Forgery.This issue affects Super Static Cache: from n/a through = 3.3.5...
CVE-2025-30568
Cross-Site Request Forgery CSRF vulnerability in hitoy Super Static Cache super-static-cache allows Cross Site Request Forgery.This issue affects Super Static Cache: from n/a through = 3.3.5...
CVE-2025-30568
CVE-2025-30568 is a CSRF vulnerability in the WordPress plugin Super Static Cache, affecting versions from n/a through 3.3.5. The connected Wordfence entry confirms the CVE ID, affected product, and nature of the issue, but no exploit details or remediation are provided in the supplied documents.
CVE-2025-30568 WordPress Super Static Cache plugin <= 3.3.5 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in hitoy Super Static Cache super-static-cache allows Cross Site Request Forgery.This issue affects Super Static Cache: from n/a through = 3.3.5...
CVE-2025-30568 WordPress Super Static Cache - <= <= 3.3.5 Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in hitoy Super Static Cache allows Cross Site Request Forgery. This issue affects Super Static Cache: from n/a through 3.3.5...
WordPress Super Static Cache plugin <= 3.3.5 - Cross Site Request Forgery (CSRF) Vulnerability
Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Super Static Cache versions = 3.3.5...
PT-2025-12613
Name of the Vulnerable Software and Affected Versions hitoy Super Static Cache versions n/a through 3.3.5 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations For versions n/a through 3.3.5, update to a...
CVE-2025-30568: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in hitoy Super Static Cache super-static-cache allows Cross Site Request Forgery.This issue affects Super Static Cache: from n/a through = 3.3.5...
WordPress plugin Super Static Cache has a cross-site request forgeing vulnerability.
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...