共收录 238 条相关情报。
← 返回所有主题CVE-2026-84367
joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.5 and 18.2.4, joi's lib/
CVE-2026-84368
joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.6 and 18.2.5, the @hapi/
CVE-2026-73088
## Vulnerability Details **File**: `node.js` **Function**: `normalizeStats()` (line ~214), reached from `getStat()` (ca
CVE-2026-81887
Livewire is a full-stack framework for Laravel. From 3.0.0-beta.1 until 3.8.3 and 4.3.4, the dot-notated query-string pa
CVE-2026-82257
SvelteKit versions before 2.69.1 contain a prototype pollution vulnerability in remote form functions with file input fi
CVE-2026-82257
SvelteKit versions before 2.69.1 contain a prototype pollution vulnerability in remote form functions with file input fi
CVE-2026-78654
A vulnerability has been found in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of th
CVE-2026-78181
A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractive#set of the component K
CVE-2026-78180
A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider
CVE-2026-78179
A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17. This vulnerability affects the function Se
CVE-2026-78178
A vulnerability was determined in jQWidgets up to 24.0.1. This affects the function JQXLite.extend/jqxBaseFramework.exte
CVE-2026-78180
A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider
CVE-2026-78207
exceljs-hardened before 5.0.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject
CVE-2026-78207
exceljs-hardened before 5.0.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject
CVE-2026-18420
Improper input validation in the Time Series Visual Builder (TSVB) plugin in OpenSearch Dashboards allows an authenticat
CVE-2026-55451
### Impact `js2i18next()` is vulnerable to prototype pollution. When converting translations, it splits nested keys on
CVE-2026-77083
n8n is a workflow automation platform. In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM
CVE-2026-23929
Prototype pollution vulnerability in searchParamsToObject() is leading to a persistent XSS in Maps. URL parameter proces
CVE-2026-73654
## Summary The run-metadata update endpoint `PUT /api/v1/runs/:runId/metadata` applies client-supplied "operations" by
CVE-2026-73654
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the