2 matches found
GO-2026-6519 Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation in github.com/projectcapsule/capsule
Capsule: hostnameRegexHandler.OnUpdate validates stale old Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation in github.com/projectcapsule/capsule...
6.8CVSS5.8AI score0.00587EPSS
SaveExploits0References4
Bugsink 代码问题漏洞
Bugsink is an open-source, self-hosted bug tracking software developed by Bugsink. Versions of Bugsink prior to 2.1.3 had code vulnerabilities. These vulnerabilities stemmed from URL parsing issues, which allowed partial bypass of Webhook URL validation. This could enable attackers to circumvent...
4.3CVSS5.9AI score0.00391EPSS
SaveExploits0References4
20