cve

CVE Problem statement: Stackoverflow I'm trying to build by project in Docker, So i'm using Docker Desktop to build my project, when i build the image i get this as one of my vulnerabilities root@kitploit: CVE-2024-26308 CWE-770 7.5 H Allocation of Resources Without Limits or Throttling...

@edgebrix-sdk/react (>=0.0.58, <=0.0.74), @kimia_software/tellair-wc (0.0.0) +16 more potentially affected by CVE-2026-56812 via phoenix (>=1.6.2, <=1.6.16)

phoenix NPM version =1.6.2, =0.0.58, =0.8.10, =0.1.8, =0.1.5, =0.1.0-rc0, =0.8.1, =0.0.1, =0.0.1, =0.0.0-PR-1--182e1d3, =19.0.0-beta.1, =1.0.23, =0.3.0, =0.1.1, =0.1.6 and more Source cves: CVE-2026-56812 Source advisory: OSV:GHSA-63MC-HW7G-86RR...

@knocklabs/client (>=0.21.6, <=0.22.1), @knocklabs/expo (>=0.5.0, <=0.8.1) +8 more potentially affected by CVE-2026-56812 via phoenix (>=1.8.0, <=1.8.7)

phoenix NPM version =1.8.0, =0.21.6, =0.5.0, =0.1.0, =0.1.1, =0.1.1, =0.0.2, =0.0.1, =0.0.2, =0.0.1, =2.1.8, =2.5.4 Source cves: CVE-2026-56812 Source advisory: OSV:GHSA-63MC-HW7G-86RR...

@absinthe/graphql-playground (>=1.3.1, <=1.3.5), @absinthe/socket (>=0.1.0, <=0.2.0) +52 more potentially affected by CVE-2026-56812 via phoenix (>=1.3.0, <=1.5.12)

phoenix NPM version =1.3.0, =1.3.1, =0.1.0, =0.1.2, =0.1.0, =0.1.2, =1.7.5, =1.5.1, =1.7.5, =1.8.1, =1.0.0, =1.5.6, =1.8.1, =1.8.1, =1.7.26, =1.7.26, =1.16.6-beta-eaa4d39d and more Source cves: CVE-2026-56812 Source advisory: OSV:GHSA-63MC-HW7G-86RR...

@abtnode/analytics (>=1.16.13-beta-0086a35d, <=1.17.13-beta-20260613-094425-b81920c8), @abtnode/auth (>=1.3.13, <=1.17.13-beta-20260613-094425-b81920c8) +212 more potentially affected by CVE-2026-56812 via phoenix (>=1.7.2, <=1.7.21)

phoenix NPM version =1.7.2, =1.16.13-beta-0086a35d, =1.3.13, =1.1.12, =1.6.23, =1.16.6-beta-08670107, =1.0.0, =1.16.33-beta-20241105-141729-e4608175, =1.0.0, =1.0.35, =1.16.33-beta-20241105-141729-e4608175, =1.0.2, =1.16.33-beta-20241105-141729-e4608175, =1.16.33-beta-20241105-141729-e4608175,...

@apify/actors-mcp-server (>=0.10.13-beta.4, <=0.11.6-beta.2), @barney-media/crap-typescript (>=0.5.0, <=0.5.1) +71 more potentially affected by CVE-2026-82404 via @toon-format/toon (>=2.1.0, <=2.3.0)

@toon-format/toon NPM version =2.1.0, =0.10.13-beta.4, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.1.0, =0.0.232, =0.0.232, =0.0.232, =1.7.0, =0.1.0, =0.1.0, =8.1.0, =8.1.0, =9.0.0-canary.17 and more Source cves: CVE-2026-82404 Source advisory: OSV:GHSA-P95V-992W-H6C3...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-62681 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-62681 Source advisory: OSV:GHSA-FG9P-MRXR-HVQ7...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-62682 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-62682 Source advisory: OSV:GHSA-88F2-FPV8-89Q2...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-72717 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-72717 Source advisory: OSV:GHSA-W727-8J6C-2RJ4...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-71869 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-71869 Source advisory: OSV:GHSA-2H9G-J24R-H63G...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-71871 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-71871 Source advisory: OSV:GHSA-8J6P-R8JG-MXQH...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-71867 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-71867 Source advisory: OSV:GHSA-2W86-XFRC-G85R...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-71868 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-71868 Source advisory: OSV:GHSA-3575-W9FC-C2J6...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-71865 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-71865 Source advisory: OSV:GHSA-653Q-5476-X79G...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-71864 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-71864 Source advisory: OSV:GHSA-6437-GXHQ-PQV8...

@agiflowai/aicode-toolkit (>=1.2.0, <=1.3.0), @agiflowai/one-mcp (>=0.4.1, <=0.4.2) +30 more potentially affected by CVE-2026-61556 via liquidjs (>=10.26.0, <=10.27.0)

liquidjs NPM version =10.26.0, =1.2.0, =0.4.1, =1.2.0, =1.1.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =36.0.0-rc.0, =0.0.1-beta.0, =3.0.0, =0.5.0, =0.3024.0, =0.3024.0, =1.1.1 and more Source cves: CVE-2026-61556 Source advisory: OSV:GHSA-M7FP-H3P4-HR49...

btree-leaderboard (2.3.1), btree-lru-cache (2.1.0) +7 more potentially affected by unknown CVE via btree-core (3.2.4)

btree-core NPM version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on btree-core and may be impacted: - btree-leaderboard 2.3.1 - btree-lru-cache 2.1.0 - btree-range-store 1.0.2 - btree-time-index 1.2.1 - neighbor-key-map 2.1.4 -...

reproducer-okio-cve-2023-3635

reproducer-okio-cve-2023-3635 What this reproduces Reproducer for facebook/react-native58148: React Native's own packages/react-native/gradle/libs.versions.toml pins okhttp = "4.9.2" / okio = "2.9.0", and okio 2.9.0 is affected by CVE-2023-3635 / GHSA-w33c-445m-f8w7, fixed in okio 3.4.0. No app...

@docyrus/ui-pro-ai-assistant (>=0.8.4, <=0.13.11) potentially affected by CVE-2026-65842 via @platejs/docx-io (53.1.0)

@platejs/docx-io NPM version 53.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @platejs/docx-io and may be impacted: - @docyrus/ui-pro-ai-assistant =0.8.4, =0.13.11 Source cves: CVE-2026-65842 Source advisory: OSV:GHSA-4Q39-2JHR-7QX8...

@00rez/form-runner (>=1.0.0, <=1.0.6), @0gflow/explorer-api (>=1.0.0, <=1.0.3) +4144 more potentially affected by CVE-2026-84394 via fast-uri (4.1.3)

fast-uri NPM version 4.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on fast-uri and may be impacted: - @00rez/form-runner =1.0.0, =1.0.0, =0.1.0, =0.1.0, =1.6.0, =0.1.0, =0.1.0, =1.0.0, =0.0.3, =0.1.6, =1.0.0, =1.1.0, =2.1.0 and more Source cves:...