heimdall_webserver

ATTENTION, ce projet est en version bêta, il y a beaucoup de bugs et de problèmes, si vous voulez aider le projet, utilisez-le dans un laboratoire, pas dans votre environnement réel. NON, le HTTPS n'est pas encore implémenté, il viendra dans la prochaine mise à jour Heimdall C'est un outil pour...

ROOT-APP-NPM-CVE-2025-59471 CVE-2025-59471 in next - Patched by Root

Root has patched CVE-2025-59471 in the next package for Root:npm. Multiple fixed versions available...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +19386 more potentially affected by CVE-2026-73088 via browserslist (>=4.0.0, <=4.28.6)

browserslist NPM version =4.0.0, =1.0.1, =1.1.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 - 0xgank-tea-child-evening 1.0...

ROOT-OS-DEBIAN-11-CVE-2024-38556 CVE-2024-38556 in linux - Patched by Root

Root has patched CVE-2024-38556 in the linux package for Root:Debian:11. Multiple fixed versions available...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, rancher, yunikorn-k8shim, vcluster, calico-fips, rancher-agent, kubernetes-csi-driver-hostpath, cloud-provider-gcp-cloud-controller-manager-fips, azurefile-csi, cluster-autoscaler-fips, longhorn-share-manager, mesosphere-vsphere-csi,...

EUVD-2026-58135

Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint...

CVE-2026-17572 affecting package hdf5 for versions less than 1.14.6-4

CVE-2026-17572 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73414 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73414 Source advisory: SNYK:JS-SHESCAPE-18752073...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +10042 more potentially affected by CVE-2026-73086 via nanoid (>=3.0.0, <=3.3.11)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =1.0.0, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.11 and more Source cves: CVE-2026-73086 Source advisory: SNYK:JS-NANOID-18748186...

Photon OS 5.0: Python3 PHSA-2023-5.0-91-0093

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0093. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3) +1093 more potentially affected by CVE-2026-71850 via hono (>=3.8.4, <=4.12.33)

hono NPM version =3.8.4, =0.1.8-fix.3, =0.1.0, =0.3.1, =5.0.0, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.0-pr-306-20260707164534, =0.9.0, =0.12.1 and more Source cves: CVE-2026-71850 Source advisory: OSV:GHSA-F23P-VX2J-J53R...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +11 more potentially affected by CVE-2026-72744 via nuxt (>=4.4.7, <=4.5.0)

nuxt NPM version =4.4.7, =3.2.0, =1.13.12, =1.2.5, =1.6.0-rc.3, =1.0.0-alpha.17, =0.1.0, =1.0.0, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-72744 Source advisory: OSV:GHSA-7C4V-FWGW-9RF7...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21424 more potentially affected by unknown CVE via js-yaml (>=3.0.0, <=3.15.0)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5P4M-2WFM-XMQJ...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the rendering of breadcrumbs in the page list view. An attacker can execute arbitrary scripts in the context of the user's browser by injecting malicious input into the breadcrumb display. Details Cross-site...

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @airmix/mcp-excalidraw-server (1.0.6) +244 more potentially affected by CVE-2026-71438 via mermaid (>=10.0.0, <=10.9.5)

mermaid NPM version =10.0.0, =0.18.0-beta.0, =0.17.0-alkemio-1, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =0.18.1, =1.1.4, =0.0.1, =0.17.1, =0.0.19, =0.0.1, =0.0.1, =0.0.6 and more Source cves: CVE-2026-71438 Source advisory: SNYK:JS-MERMAID-18592324...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.35), @142vip/vuepress (>=0.0.1-alpha.19, <=0.0.1-alpha.25) +220 more potentially affected by CVE-2026-50159 via mermaid (>=11.0.0, <=11.16.0)

mermaid NPM version =11.0.0, =0.0.1-alpha.23, =0.0.1-alpha.19, =0.0.0, =1.1.0, =2.1.0, =2.1.0, =0.1.0, =2.1.0, =2.1.0, =2.1.0, =2.0.2, =0.0.3, =0.7.9, =0.15.0, =0.25.2 - @changmao/reveal-md 6.1.4-chanmao0.0 and more Source cves: CVE-2026-50159 Source advisory: SNYK:JS-MERMAID-18592305...

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @airmix/mcp-excalidraw-server (1.0.6) +202 more potentially affected by CVE-2026-71436 via mermaid (>=10.6.1, <=10.9.5)

mermaid NPM version =10.6.1, =0.18.0-beta.0, =0.17.1-alkemio-5, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =0.18.1, =1.1.4, =0.0.1, =0.0.1, =0.0.1, =7.1.0, =0.114.3, =0.143.0 and more Source cves: CVE-2026-71436 Source advisory: OSV:GHSA-2V8P-3F2J-5MP7...

@apicity/mcp-server (0.8.5) potentially affected by unknown CVE via @apicity/meta (0.8.5)

@apicity/meta NPM version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on @apicity/meta and may be impacted: - @apicity/mcp-server 0.8.5 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13412...

@whalent/agent (0.3.240) potentially affected by unknown CVE via @whalent/agent-core (0.3.240)

@whalent/agent-core NPM version 0.3.240 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.240 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...

@whalent/agent (0.3.271) potentially affected by unknown CVE via @whalent/agent-core (0.3.271)

@whalent/agent-core NPM version 0.3.271 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.271 Source cves: unknown CVE Source advisory: SNYK:JS-WHALENTAGENTCORE-18565245...