Most recent entries from cvelistv5

JLine: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry

Published on Fri, 17 Jul 2026 21:15:14 +0000

@hapi/inert: Static-file confinement bypass via sibling-prefix path

Published on Fri, 17 Jul 2026 21:03:16 +0000

@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects

Published on Fri, 17 Jul 2026 21:02:05 +0000

@hapi/wreck : Sensitive `Proxy-Authorization` header leaked across cross-hostname redirects

Published on Fri, 17 Jul 2026 21:01:01 +0000

HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint

Published on Fri, 17 Jul 2026 20:59:47 +0000

Feathersjs: Prototype pollution in @feathersjs/commons _.merge via JSON-parsed __proto__

Published on Fri, 17 Jul 2026 20:56:51 +0000

websocket-driver: Resource limit bypass via message compression

Published on Fri, 17 Jul 2026 20:54:22 +0000

websocket-driver: Message corruption via abuse of protocol length headers

Published on Fri, 17 Jul 2026 20:53:24 +0000

Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation

Published on Fri, 17 Jul 2026 20:51:19 +0000

Published on Fri, 17 Jul 2026 00:00:00 +0000

Recent Items