CVE-2026-63414

A flaw was found in shopifyapp. In token-exchange authentication workflows, the application can resolve the active store context from an unverified request parameter rather than the validated session token. An authenticated remote attacker with a valid session token for one store can exploit this...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the tlsverifycallback function. An attacker can cause the application to crash by sending a specially crafted DTLS handshake that results in SSLgetexdataX509STORECTXidx returning -1. Remediation...

PT-2021-27590

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value". The crash state includes functions such as evict, fz empty store, and fz drop store...