offset

Ech0 before 4.4.3 SSRF via DNS Resolution Bypass

justhtml before 1.12.0 Mutation XSS via Raw Text Elements

Ech0 before 4.4.3 Scope Bypass via profile:read Token

Ech0 before 4.4.3 Stored XSS via SVG Upload

Ech0 before 4.4.3 Authentication Bypass via Comment Panel

Ech0 before 4.4.3 Missing Authorization on System Logs

Scriban before 7.0.0 Uncontrolled Recursion via object.to_json

Scriban before 7.0.0 Denial of Service via Unbounded Template Output

Scriban before 7.0.0 Denial of Service via string.pad_left/pad_right

Scriban before 7.0.0 Denial of Service via Unbounded Resource Consumption