Authorization-redacted field values disclosed through AshTypescript result normalization
CVE-2026-82730
Incorrect Authorization vulnerability in ash-project ash_typescript allows an unauthorized RPC caller to read attribute
#advisory
共收录 23717 条相关情报。
← 返回所有主题RPC error handler fails open in AshTypescript, disclosing unredacted errors
CVE-2026-77950
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unaut
Unbounded atom creation from typed struct field names in AshTypescript field selector
CVE-2026-77856
Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_typescript allows an unauthenticat
A vulnerability was found in hyperledger-firefly firefly up to 1.4.0. The impacted element is the...
CVE-2026-82957
A vulnerability was found in hyperledger-firefly firefly up to 1.4.0. The impacted element is the function ValidateOptio
A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and...
CVE-2026-83524
A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 2
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown...
CVE-2026-82971
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-b
A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function...
CVE-2026-82954
A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the fi
Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token...
CVE-2026-82882
Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token/webhook endpoint, allowin
A security vulnerability has been detected in ShopEx ECShop up to 2.5.1. This vulnerability...
CVE-2026-82922
A security vulnerability has been detected in ShopEx ECShop up to 2.5.1. This vulnerability affects the function flow_up
A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function...
CVE-2026-82921
A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function check_img_type of the file admin/
CVE-2026-51974
CVE-2026-51974
An eval() injection vulnerability in the get_list function in modules/meta_parser.py in lllyasviel Fooocus 2.1.854 throu
Kirby: File upload permissions are not checked during processing of chunk data
CVE-2026-71415
### TL;DR This vulnerability affects all Kirby sites where users of a particular role have access to the REST API (`acc
Kirby: Access to image files and limited access to JSON files outside of the site root via path traversal in the media handling
CVE-2026-75594
### TL;DR This vulnerability affects all Kirby sites that are deployed to a server that allows requests for URLs with e
decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input
CVE-2026-45822
### Impact An attacker who can supply input to `decodeUriComponent()` (directly or via a dependency that uses this packa
Unauthenticated PHP Object Injection in Tickera <= 3.6.0.2 versions.
CVE-2026-82226
Unauthenticated PHP Object Injection in Tickera <= 3.6.0.2 versions.
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due...
CVE-2026-83596
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handl
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.2 versions.
CVE-2026-82229
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.2 versions.
Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.9.8 versions.
CVE-2026-82225
Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.9.8 versions.
A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This...
CVE-2026-82914
A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown cod
Unauthenticated Server Side Request Forgery (SSRF) in MapSVG <= 8.15.0 versions.
CVE-2026-82852
Unauthenticated Server Side Request Forgery (SSRF) in MapSVG <= 8.15.0 versions.