CVE-2026-49361

CVE-2026-49361: Apache Fluss Netty frame-decoder memory exhaust vulnerability . Affected: Apache Fluss (incubating) versions prior to 0.9.1 (0.8.0 and 0.9.0). Root cause: Netty LengthFieldBasedFrameDecoder configured with Integer.MAX_VALUE as the maximum frame length. Impact: unauthenticated remo...

CVE-2023-39015

webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader...

PT-2023-23116

Name of the Vulnerable Software and Affected Versions Log4cxx versions 0.9.0 through 1.1.0 Description The issue is related to SQL injection in Log4cxx when using the ODBC appender to send log messages to a database. No fields sent to the database were properly escaped for SQL injection. This has...

PT-2023-15928 · Mportuga · Eslint-Detailed-Reporter

Name of the Vulnerable Software and Affected Versions: mportuga eslint-detailed-reporter versions up to 0.9.0 Description: A vulnerability was found in the function renderIssue in the library lib/template-generator.js, which can lead to cross-site scripting when the message argument is manipulate...