cve-2026-22732-poc

CVE-2026-22732 — 개념 증명 Spring Security가 HTTP 응답 보안 헤더를 조용히 누락시킨다. 데모 / 교육용으로만 사용하며, 이 로컬 앱 외에는 어떤 대상에도 실행하지 말 것. | ---|--- CVE| CVE-2026-22732 CWE-425, 2026-03-19 공개 CVSS 3.1| 9.1 CRITICAL — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 직접 의존성| spring-boot-starter-web + spring-boot-starter-security 2.7.18...

cve

CVE 문제 설명: Stackoverflow Docker에서 내 프로젝트를 빌드하려고 합니다. 그래서 Docker Desktop을 사용하여 프로젝트를 빌드하고 있습니다. 이미지를 빌드하면 다음 항목이 내 취약점 중 하나로 표시됩니다. CVE-2024-26308 CWE-770 7.5 H Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress. This issue affects Apache Commons Compress...

reproducer-okio-cve-2023-3635

reproducer-okio-cve-2023-3635 이 저장소가 재현하는 것 facebook/react-native58148에 대한 재현기Reproducer: React Native 자체의 packages/react-native/gradle/libs.versions.toml 파일이 okhttp = "4.9.2" / okio = "2.9.0"을 고정pin하고 있으며, okio 2.9.0은 CVE-2023-3635 / GHSA-w33c-445m-f8w7의 영향을 받고, 이는 okio 3.4.0에서 수정되었습니다. 이를 만들기 위...

confetti (>=4.0.0-rc.0, <=4.1.4) potentially affected by CVE-2026-61534 via yayson (>=4.1.0, <=4.2.0)

yayson NPM version =4.1.0, =4.0.0-rc.0, =4.1.4 Source cves: CVE-2026-61534 Source advisory: OSV:GHSA-325J-MG25-8Q58...

@mockoon/cli (>=9.0.0, <=9.6.1), @mockoon/serverless (>=9.0.0, <=9.6.1) +2 more potentially affected by CVE-2026-59148 via @mockoon/commons-server (>=9.0.0, <=9.6.1)

@mockoon/commons-server NPM version =9.0.0, =9.0.0, =9.0.0, =0.0.1, =0.30.0, =0.40.0 Source cves: CVE-2026-59148 Source advisory: OSV:GHSA-RQX4-3F6Q-3X2V...

@mockoon/cli (>=9.0.0, <=9.6.1), @mockoon/serverless (>=9.0.0, <=9.6.1) +2 more potentially affected by CVE-2026-59149 via @mockoon/commons-server (>=9.0.0, <=9.6.1)

@mockoon/commons-server NPM version =9.0.0, =9.0.0, =9.0.0, =0.0.1, =0.30.0, =0.40.0 Source cves: CVE-2026-59149 Source advisory: OSV:GHSA-8WQC-V2Q8-VFF2...

@frontmcp/adapters (>=1.0.4, <=1.5.0-rc.1), @frontmcp/plugin-skilled-openapi (>=0.0.1, <=1.5.0-rc.1) potentially affected by CVE-2026-59973 via mcp-from-openapi (>=2.3.0, <=2.4.0)

mcp-from-openapi NPM version =2.3.0, =1.0.4, =0.0.1, =1.5.0-rc.1 Source cves: CVE-2026-59973 Source advisory: OSV:GHSA-65H7-9WRW-629C...

@frontmcp/plugin-skilled-openapi (>=1.2.1, <=1.4.1) potentially affected by CVE-2026-59973 via @frontmcp/adapters (>=1.2.1, <=1.4.1)

@frontmcp/adapters NPM version =1.2.1, =1.2.1, =1.4.1 Source cves: CVE-2026-59973 Source advisory: OSV:GHSA-65H7-9WRW-629C...

@argos-ci/cli (>=5.0.0, <=5.1.0), @argos-ci/cypress (>=7.0.0, <=7.0.7) +2 more potentially affected by CVE-2026-59960 via @argos-ci/core (>=6.0.0, <=6.2.0)

@argos-ci/core NPM version =6.0.0, =5.0.0, =7.0.0, =7.0.0, =6.0.0, =6.0.8 Source cves: CVE-2026-59960 Source advisory: OSV:GHSA-4X45-GXVP-6283...

create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-88060 via @angular/platform-server (>=21.1.2, <=21.2.9)

@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-88060 Source advisory: OSV:GHSA-V3P8-WHQ6-R5JG...

3d-card (0.0.2), @cosla/sensemaking-web-ui (>=1.0.5, <=1.0.9) +20 more potentially affected by CVE-2026-88060 via @angular/platform-server (>=19.2.18, <=19.2.25)

@angular/platform-server NPM version =19.2.18, =1.0.5, =0.0.1-rc.2, =1.0.0, =0.0.2, =19.1.0, =16.0.0, =1.52.0, =0.0.0, =0.0.0, =14.1.0, =14.3.0 and more Source cves: CVE-2026-88060 Source advisory: OSV:GHSA-V3P8-WHQ6-R5JG...

@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-88060 via @angular/platform-server (>=20.0.0, <=20.3.19)

@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-88060 Source advisory: OSV:GHSA-V3P8-WHQ6-R5JG...

create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-88056 via @angular/platform-server (>=21.1.2, <=21.2.9)

@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-88056 Source advisory: OSV:GHSA-F6MR-PJWC-34M4...

3d-card (0.0.2), @cosla/sensemaking-web-ui (>=1.0.5, <=1.0.9) +20 more potentially affected by CVE-2026-88056 via @angular/platform-server (>=19.2.18, <=19.2.25)

@angular/platform-server NPM version =19.2.18, =1.0.5, =0.0.1-rc.2, =1.0.0, =0.0.2, =19.1.0, =16.0.0, =1.52.0, =0.0.0, =0.0.0, =14.1.0, =14.3.0 and more Source cves: CVE-2026-88056 Source advisory: OSV:GHSA-F6MR-PJWC-34M4...

@hmcts/ccd-case-ui-toolkit (>=7.3.49-4369, <=7.3.51), @hmcts/media-viewer (>=4.2.16-4435, <=4.2.17) +1 more potentially affected by CVE-2026-88056 via @angular/platform-server (>=20.0.0, <=20.3.19)

@angular/platform-server NPM version =20.0.0, =7.3.49-4369, =4.2.16-4435, =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2026-88056 Source advisory: OSV:GHSA-F6MR-PJWC-34M4...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.8), @bitblit/ngx-acute-common (>=6.1.210-alpha, <=6.1.222-alpha) +16 more potentially affected by CVE-2026-88059 via @angular/common (>=22.0.0, <=22.0.8)

@angular/common NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =23.0.0-alpha.2, =23.0.0-alpha.2, =0.0.0, =0.249.2, =0.250.0 and more Source cves: CVE-2026-88059 Source advisory: OSV:GHSA-P297-FM68-3Q8C...

@amwaljs/checkout-angular (0.2.11), @bitblit/ngx-acute-common (>=6.1.182-alpha, <=6.1.209-alpha) +53 more potentially affected by CVE-2026-88059 via @angular/common (>=21.0.0, <=21.2.19)

@angular/common NPM version =21.0.0, =6.1.182-alpha, =6.1.182-alpha, =0.1.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =3.0.1, =2.0.1, =2.0.1, =2.0.1, =6.0.1, =2.0.1, =4.0.0, =6.1.0-edge.5 and more Source cves: CVE-2026-88059 Source advisory: OSV:GHSA-P297-FM68-3Q8C...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +33 more potentially affected by CVE-2026-88059 via @angular/common (>=20.0.0, <=20.3.25)

@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =1.1.89, =0.0.57, =0.7.2, =0.7.3 and more Source cves: CVE-2026-88059 Source advisory: OSV:GHSA-P297-FM68-3Q8C...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +311 more potentially affected by CVE-2026-88059 via @angular/common (>=19.0.0, <=19.2.25)

@angular/common NPM version =19.0.0, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 and more Source cves: CVE-2026-88059 Source advisory: OSV:GHSA-P297-FM68-3Q8C...

@absolutejs/absolute (0.12.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +36 more potentially affected by CVE-2026-88057 via @angular/compiler (>=20.0.0, <=20.3.21)

@angular/compiler NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =7.3.49-4369, =4.2.16-4435, =8.9.1, =8.9.1, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2026-88057 Source advisory:...