offset

Capgo - Account Takeover via Cross-Domain SSO Email Assertion in provision-user

vm2 before 3.11.6 Process-wide State Exposure via os and dns

Flowise before 3.1.4 Denial of Service via text-to-speech/abort

Froxlor before 2.3.7 Authorization Bypass via Mysqls.add API

h3 before 1.15.9 Path Traversal via Double Decoding

h3 before 1.15.9 SSE Event Injection via Carriage Return

h3 before 2.0.1-rc.18 Open Redirect via redirectBack()

@pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetch

pdfme pdf-lib before 5.5.10 Denial of Service via Decompression Bomb

pdfme schemas before 5.5.10 Cross-Site Scripting via i18n Label