GHSA-QP24-9C29-MR6G vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9911 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9950 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9988 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-10014 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9931 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9975 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-5F28-4VHP-7F3H vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-10012 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-10008 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9903 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9964 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-9GGG-9FQ9-QXVG vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9961 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9980 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-MCVQ-RH64-88V2 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2X67-3HQQ-GFWQ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-H292-V482-XHXH vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-10001 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-Q4X5-8CJ6-52WG Sync-in Server: SSRF protection bypass via IPv4-mapped IPv6 addresses in regExpPrivateIP

Summary: The private IP blocklist regex used in the URL download feature does not match IPv4-mapped IPv6 addresses e.g. ::ffff:127.0.0.1, allowing SSRF protection to be bypassed on dual-stack systems. Affected components backend/src/applications/files/services/files-manager.service.ts –...