protobuf.js: Prototype injection in generated message constructors

CVE-2026-44292

## Summary protobufjs generated message constructors copied enumerable properties from a provided properties object wit

历史摘要 · 未重新核验 · GitHub Advisory

protobuf.js: Code generation gadget after prototype pollution

CVE-2026-44291

## Summary protobufjs used plain objects with inherited prototypes for internal type lookup tables used by generated en

历史摘要 · 未重新核验 · GitHub Advisory

protobuf.js: Process-wide denial of service through unsafe option paths

CVE-2026-44290

## Summary protobufjs allowed certain schema option paths to traverse through inherited object properties while applyin

历史摘要 · 未重新核验 · GitHub Advisory

protobuf.js: Denial of service through unbounded protobuf recursion

CVE-2026-44289

## Summary protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected both skipp

历史摘要 · 未重新核验 · GitHub Advisory

protobufjs has overlong UTF-8 decoding

CVE-2026-44288

## Summary protobufjs includes a minimal UTF-8 decoder used in non-Node and fallback decoding paths. The affected decod

历史摘要 · 未重新核验 · GitHub Advisory

protobuf.js is Vulnerable to OS Command Injection in the CLI

CVE-2026-42290

## Summary `pbts` invoked JSDoc by building a shell command string from input file paths and executing it through `chil

历史摘要 · 未重新核验 · GitHub Advisory

Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

CVE-2026-45321

## Summary On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 `@tanstack/*` pack

历史摘要 · 未重新核验 · GitHub Advisory

Kysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()`

CVE-2026-44635

## Summary Kysely 0.28.12 added a `sanitizeStringLiteral()` call inside `DefaultQueryCompiler.visitJSONPathLeg` (commit

历史摘要 · 未重新核验 · GitHub Advisory

SandboxJS has a sandbox escape via Function.caller leakage of internal call op

CVE-2026-43898

### Summary Sandbox-defined functions expose `Function.caller`, allowing sandboxed code to recover the internal `LispTyp

历史摘要 · 未重新核验 · GitHub Advisory

Mermaid: Improper sanitization of configuration leads to CSS injection

CVE-2026-41159

### Impact Mermaid's default configuration allows injecting CSS that applies outside of the Mermaid diagram via the `fo

历史摘要 · 未重新核验 · GitHub Advisory

Mermaid Gantt Charts are vulnerable to an Infinite Loop DoS

CVE-2026-41150

### Impact Mermaid v11.14.0 and earlier are vulnerable to a denial-of-service attack when rendering gantt charts, if th

历史摘要 · 未重新核验 · GitHub Advisory

Mermaid: Improper sanitization of `classDef` in state diagrams leads to HTML injection

CVE-2026-41149

### Impact Under the default configuration, Mermaid state diagram's `classDef` allow DOM injection that escapes the SVG

历史摘要 · 未重新核验 · GitHub Advisory

Mermaid: Improper sanitization of `classDefs` in diagrams leads to CSS injection

CVE-2026-41148

### Details The state diagram and any other diagram type that routes user-controlled style strings through createCssSty

历史摘要 · 未重新核验 · GitHub Advisory

WebdriverIO BrowserStack Service has a Command Injection issue

CVE-2026-25244

### Summary A command injection vulnerability exists in `@wdio/browserstack-service` that allows remote code execution (

历史摘要 · 未重新核验 · GitHub Advisory

Hono has CSS Declaration Injection via Style Object Values in JSX SSR

CVE-2026-44458

### Summary The JSX renderer escapes `style` attribute object values for HTML but not for CSS. Untrusted input in a `st

历史摘要 · 未重新核验 · GitHub Advisory

Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()

CVE-2026-44459

### Summary Improper validation of the JWT NumericDate claims `exp`, `nbf`, and `iat` in `hono/utils/jwt` allows tokens

历史摘要 · 未重新核验 · GitHub Advisory

@profullstack/mcp-server vulnerable to OS Command Injection in domain_lookup Module

Security Advisory: OS Command Injection in profullstack/mcp-server domain_lookup Module Field | Value -- | -- Project

历史摘要 · 未重新核验 · GitHub Advisory

Velocity.js has a Prototype Pollution vulnerability through #set path assignment

CVE-2026-44966

### Summary A prototype pollution vulnerability was discovered in Velocity.js )[key] = val`. Because there is no valid

历史摘要 · 未重新核验 · GitHub Advisory

Hono's Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakage

CVE-2026-44457

### Summary Cache Middleware does not skip caching for responses that declare per-user variance via `Vary: Authorizatio

历史摘要 · 未重新核验 · GitHub Advisory

@yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools

CVE-2026-44895

## SSE Transport Has No Authentication and Wildcard CORS, Exposing All 86 GitLab Tools Including Destructive Operations

历史摘要 · 未重新核验 · GitHub Advisory