Lucene search
+L

190 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-25029

Malicious code in bioql PyPI...

6.9CVSS6.3AI score0.00572EPSS
SaveExploits0References3
Veracode
Veracode
added 2025/09/05 10:12 a.m.16 views

Open Redirection

@astrojs/node is vulnerable to Open Redirection. The vulnerability is due to incorrect handling of double slashes with the Node deployment adapter in standalone mode and trailingSlash set to "always," allowing attackers to redirect users to malicious domains...

6.9CVSS6.9AI score0.00572EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2025/08/28 8:52 a.m.6 views

Open Redirect

Astro is vulnerable to Open Redirect. The vulnerability is due to improper handling of paths with double slashes in the trailing slash redirection logic, which allows an attacker to redirect users to arbitrary external domains and perform phishing or social engineering attacks...

6.9CVSS6.7AI score0.00614EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-32841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SharpZipLib or ziplib is a Zip, GZip, Tar and BZip2 library. Starting version 1.3.0 and prior to version 1.3.3, a check was added if the destination file is und...

5.3CVSS6.2AI score0.01079EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2019-14857

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in modauthopenidc before version 2.4.0.1. An open redirect issue exists in URLs with trailing slashes similar to CVE-2019-3877 in modauthmellon...

6.1CVSS6.6AI score0.01535EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-22872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, thi...

6.5CVSS6.3AI score0.00513EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/08/17 3:24 p.m.59 views

CVE-2025-55207

Astro is a web framework for content-driven websites. Following CVE-2025-54793 there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios prior to version 9.4.1. Astro 5.12.8 addressed CVE-2025-54793 where https://example.com//astro.build/press would redirect to the...

6.9CVSS7AI score0.00614EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/15 4:52 p.m.4 views

GHSA-9X9C-GHC5-JHW9 @astrojs/node's trailing slash handling causes open redirect issue

Summary Following https://github.com/withastro/astro/security/advisories/GHSA-cq8c-xv66-36gw, there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios. Details Astro 5.12.8 fixed a case where https://example.com//astro.build/press would redirect to the external origi...

6.9CVSS7.2AI score0.00572EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2025/08/15 4:52 p.m.11 views

@astrojs/node's trailing slash handling causes open redirect issue

Summary Following https://github.com/withastro/astro/security/advisories/GHSA-cq8c-xv66-36gw, there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios. Details Astro 5.12.8 fixed a case where https://example.com//astro.build/press would redirect to the external origi...

6.9CVSS7.2AI score0.00572EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2025/08/15 4:15 p.m.8 views

CVE-2025-55207

Astro is a web framework for content-driven websites. Following CVE-2025-54793 there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios prior to version 9.4.1. Astro 5.12.8 addressed CVE-2025-54793 where https://example.com//astro.build/press would redirect to the...

6.9CVSS0.00572EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/08/15 3:46 p.m.5 views

Open Redirect

Overview @astrojs/node is a Deploy your site to a Node.js server Affected versions of this package are vulnerable to Open Redirect via the trailingSlash configuration in standalone mode with the Node deployment adapter. An attacker can redirect users to external sites by crafting URLs with double...

7.2CVSS6.8AI score0.00572EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/15 3:13 p.m.20 views

CVE-2025-55207

Astro CVE-2025-55207 describes an Open Redirect vulnerability in certain Astro deployment scenarios. Specifically, when using the Node deployment adapter in standalone mode with trailingSlash set to "always", URLs like https://example.com//astro.build/press can redirect to //astro.build/press, en...

6.9CVSS6AI score0.00572EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/15 3:13 p.m.15 views

CVE-2025-55207 @astrojs/node's trailing slash handling causes open redirect issue

Astro is a web framework for content-driven websites. Following CVE-2025-54793 there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios prior to version 9.4.1. Astro 5.12.8 addressed CVE-2025-54793 where https://example.com//astro.build/press would redirect to the...

6.9CVSS0.00572EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/15 3:13 p.m.6 views

CVE-2025-55207 @astrojs/node's trailing slash handling causes open redirect issue

Astro is a web framework for content-driven websites. Following CVE-2025-54793 there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios prior to version 9.4.1. Astro 5.12.8 addressed CVE-2025-54793 where https://example.com//astro.build/press would redirect to the...

6.9CVSS6.2AI score0.00572EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/08/15 12:0 a.m.8 views

PT-2025-33494 · Astro · Astro

Name of the Vulnerable Software and Affected Versions: Astro versions prior to 9.4.1 Description: Astro is a web framework for content-driven websites. An open redirect vulnerability exists in certain Astro deployment scenarios. Specifically, when using the Node deployment adapter in standalone...

6.9CVSS7.1AI score0.00572EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
added 2025/08/13 12:11 a.m.6 views

Security update for kubernetes1.23

This update for kubernetes1.23 fixes the following issues: CVE-2021-25743: Escape terminal special characters in kubectl output bsc1194400. CVE-2023-2431: Prevent pods to bypass the seccomp profile enforcement bsc1212493. CVE-2024-0793: Advance autoscaling v2 as the preferred API version...

6.5CVSS5.5AI score0.02224EPSS
SaveExploits1References22
RedhatCVE
RedhatCVE
added 2025/08/10 12:15 a.m.8 views

CVE-2025-54793

Astro is a web framework for content-driven websites. In versions 5.2.0 through 5.12.7, there is an Open Redirect vulnerability in the trailing slash redirection logic when handling paths with double slashes. This allows an attacker to redirect users to arbitrary external domains by crafting URLs...

6.9CVSS6.6AI score0.00614EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/08 12:2 a.m.5 views

CVE-2025-54793 Astro: Duplicate trailing slash feature can lead to Open Redirects

Astro is a web framework for content-driven websites. In versions 5.2.0 through 5.12.7, there is an Open Redirect vulnerability in the trailing slash redirection logic when handling paths with double slashes. This allows an attacker to redirect users to arbitrary external domains by crafting URLs...

6.9CVSS6.2AI score0.00614EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/08 12:2 a.m.13 views

CVE-2025-54793 Astro: Duplicate trailing slash feature can lead to Open Redirects

Astro is a web framework for content-driven websites. In versions 5.2.0 through 5.12.7, there is an Open Redirect vulnerability in the trailing slash redirection logic when handling paths with double slashes. This allows an attacker to redirect users to arbitrary external domains by crafting URLs...

6.9CVSS0.00614EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/08 12:2 a.m.39 views

CVE-2025-54793

Summary: CVE-2025-54793 affects Astro web framework. Versions 5.2.0 through 5.12.7 have an Open Redirect in the trailing slash redirection logic when handling paths with double slashes, enabling a user to be redirected to an external domain via crafted URLs (e.g., https://example.com//malicious-s...

6.9CVSS6.3AI score0.00614EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder