Better Auth has stored XSS in the auth-server origin via javascript: redirect_uri in oidc-provider and mcp

### Am I affected? Check each condition. Users are affected when all of the first three hold. - Their application enab

历史摘要 · 未重新核验 · GitHub Advisory

Kiwi TCMS has an Open Redirect via unvalidated next parameter in account confirmation endpoint

CVE-2026-54724

### Summary An open redirect vulnerability in the account confirmation endpoint allows an unauthenticated attacker to c

历史摘要 · 未重新核验 · GitHub Advisory

Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps

CVE-2026-55431

### Summary `coder open app` opens external workspace-app URLs without validating the scheme or host. When an external

历史摘要 · 未重新核验 · GitHub Advisory

CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

CVE-2026-53935

### Impact Users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMat

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was found in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to...

CVE-2026-14632

A vulnerability was found in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 95dfa8cebbb87ab46ae450643a07241274a74dce.

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was found in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 95dfa8cebbb87ab46ae450643a07241274a74dce. Affected by this issue is the function setReferrer of th...

CVE-2026-14632

A vulnerability was found in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 95dfa8cebbb87ab46ae450643a07241274a74dce.

历史摘要 · 未重新核验 · NVD

Gitea versions up to and including 1.25.4 allow redirect bypasses through raw or percent-encoded backslashes in redirect_to values.

CVE-2026-25779

Gitea versions up to and including 1.25.4 allow redirect bypasses through raw or percent-encoded backslashes in redirect

历史摘要 · 未重新核验 · NVD

OpenClaw MCP SSE redirects could forward Authorization headers

### Summary MCP SSE redirects could forward Authorization headers. In affected versions, a lower-trust caller or config

历史摘要 · 未重新核验 · GitHub Advisory

Tina is a headless content management system. In versions prior to @tinacms/app 2.5.6 and tinacms 3.9.3, cross-origin postMessage handlers and a rich-text URL-sanitization bypas...

CVE-2026-55660

Tina is a headless content management system. In versions prior to @tinacms/app 2.5.6 and tinacms 3.9.3, cross-origin po

历史摘要 · 未重新核验 · NVD

URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects ...

CVE-2026-58520

URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener E

历史摘要 · 未重新核验 · NVD

Invoice Ninja through 5.13.26 contains an open redirect vulnerability in the client portal login that allows unauthenticated attackers to redirect authenticated victims to attac...

CVE-2026-58450

Invoice Ninja through 5.13.26 contains an open redirect vulnerability in the client portal login that allows unauthentic

历史摘要 · 未重新核验 · NVD

An unauthenticated URL redirection vulnerability has been identified in Archer AX20 V2 due to improper validation of user-supplied URL input within the web interface.  An unauth...

CVE-2026-10562

An unauthenticated URL redirection vulnerability has been identified in Archer AX20 V2 due to improper validation of use

历史摘要 · 未重新核验 · NVD

Probo has an open redirect bypass via path normalization

CVE-2026-49820

### Impact Probo's `saferedirect` package validates redirect URLs used across authentication flows (OIDC, SAML, session

历史摘要 · 未重新核验 · GitHub Advisory

Nezha Monitoring: OAuth2 Redirect URL — Host Header Injection

CVE-2026-53523

## 1. Description The `getRedirectURL` function in `oauth2.go:22-29` constructs the OAuth2 callback URL by concatenatin

历史摘要 · 未重新核验 · GitHub Advisory

Hackney: Cross-origin Redirect Leaks Authorization, Cookie, and Request Body

CVE-2026-47070

### Summary The HTTP/3 redirect handler in `src/hackney_h3.erl` forwards the original request headers (`Authorization`,

历史摘要 · 未重新核验 · GitHub Advisory

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Open Redirect through a substring check rather than a host check ...

CVE-2026-40080

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Open Red

历史摘要 · 未重新核验 · NVD

Gogs is an open source self-hosted Git service. Prior to 0.14.3, an open redirect vulnerability exists in Gogs where attacker-controlled redirect_to parameters can bypass valida...

CVE-2026-52802

Gogs is an open source self-hosted Git service. Prior to 0.14.3, an open redirect vulnerability exists in Gogs where att

历史摘要 · 未重新核验 · NVD

Open redirect vulnerability (CWE-601) in the _safe_redirect function of the click-tracking endpoint (/c/<token>/) in Mailerup <1.0.0 on all platforms allows remote unauthenticat...

CVE-2026-13163

Open redirect vulnerability (CWE-601) in the _safe_redirect function of the click-tracking endpoint (/c//) in Mailerup <

历史摘要 · 未重新核验 · NVD

Poweradmin is a web-based DNS administration tool for PowerDNS server. Versions prior to 4.2.4 and 4.3.3 use the attacker-controlled `HTTP_HOST` request header as the authoritat...

CVE-2026-54588

Poweradmin is a web-based DNS administration tool for PowerDNS server. Versions prior to 4.2.4 and 4.3.3 use the attacke

历史摘要 · 未重新核验 · NVD

Flask-Security has an Open Redirect issue

# Open Redirect in Flask-Security ## Summary `flask_security.utils.validate_redirect_url()` can allow an attacker-cont

历史摘要 · 未重新核验 · GitHub Advisory