Categoria: CVE

A vulnerability has been found in Basecamp Trix up to 2.1.17 and classified as problematic. The affected element is the function StringPiece.fromJSON of the component HTMLParser/StringPiece. The manipulation leads to HTML...

A vulnerability, which was classified as critical, was found in Budibase up to 3.39.23. Impacted is the function validateGlobalRoleUpdate of the file packages/server/src/api/controllers/public/globalRoleValidation.ts of the...

A vulnerability, which was classified as problematic, has been found in Eugeny Russh up to 0.62.3. This issue affects some unknown processing of the file russh/src/server/encrypted.rs of the component Parser. Performing a...

A vulnerability classified as critical was found in NextAuth.js @auth, core and next-auth. This vulnerability affects the function defaultNormalizer of the component Email Normalization. Such manipulation leads to improper...

A vulnerability classified as problematic has been found in OpenChoreo. This affects an unknown part of the file internal/cluster-gateway/server.go of the component cluster-gateway. This manipulation causes improper certificate...

A vulnerability has been found in Google html-template up to 1.25.12/1.26.5 and classified as problematic. This vulnerability affects unknown code. Performing a manipulation results in cross site scripting. This vulnerability is...

A vulnerability, which was classified as problematic, was found in Go encoding and xml up to 1.25.12/1.26.5. This affects the function DecodeElement. Such manipulation leads to allocation of resources. This vulnerability is...

A vulnerability, which was classified as problematic, has been found in Google Go up to 1.25.12/1.26.5. Affected by this issue is the function Unmarshal of the component encoding-asn1. This manipulation causes resource...

A vulnerability classified as critical was found in Budibase up to 3.39.x. Affected by this vulnerability is an unknown functionality of the file /api/global/users/tenant/owner. The manipulation results in improper...

A vulnerability classified as critical has been found in Budibase up to 3.39.x. Affected is an unknown function of the component OpenAPI Query Import. The manipulation leads to server-side request forgery. This vulnerability is...

A vulnerability was found in Byron dua-cli up to 2.41.1. It has been rated as problematic. Affected by this issue is some unknown functionality of the component TUI interface. Performing a manipulation results in escaping of...

A vulnerability was found in triggerdotdev trigger.dev up to 4.4.x. It has been declared as critical. Affected by this vulnerability is the function resolveStoreProtocolForPacketPresign of the file...