fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array
CVE-2026-107723
### Summary `fast-jwt`'s `createVerifier` silently skips **all** configured claim validators (`exp`, `nbf`, `iss`, `aud
#npm
共收录 1041 条相关情报。
← 返回所有主题fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery
CVE-2026-107724
### Summary `fast-jwt` 6.2.4 silently classifies raw serialized public JWK JSON as an HMAC secret. If an application s
PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure
CVE-2026-61426
## Summary The AgentOS server in the `praisonai` TypeScript/npm package ships an insecure default: it binds `0.0.0.0`,
music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master
CVE-2026-107391
### Summary `StsdAtom.get()` in `lib/mp4/AtomToken.ts` parses an MP4 `stsd` (sample description) box's entry table by a
music-metadata: Uncontrolled memory allocation in APEv2 parser
CVE-2026-107387
## Summary `music-metadata` 11.15.0 is vulnerable to uncontrolled memory allocation in the APEv2 parser. The parser re
music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS
CVE-2026-107388
### Summary The ID3v2 parser in music-metadata trusts the tag size field without validation and allocates the full requ
music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort
CVE-2026-107389
## Summary The Matroska/WebM EBML parser decodes attacker-controlled variable-length integer (VINT) element lengths wit
Ghost: Remote Code Execution via Bookmark Card Images
CVE-2026-105642
### Impact An image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user
Ghost: Stored XSS via Embed Card Previews
CVE-2026-105643
### Impact Embed cards in the Ghost editor could be used to bypass the fix for GHSA-8vhf-xxpj-4qrg. Any staff user, inc
Ghost : Stored XSS via SVG Files in Content Imports
CVE-2026-105644
### Impact SVG images included in content imports were stored without sanitization. An attacker who convinced an Admini
Ghost: Regular Expression Denial of Service in External Media Inliner
CVE-2026-105645
### Impact A crafted request to the external media inliner could cause excessive CPU usage, making the Ghost server unr
Ghost: Regular Expression Denial of Service in Content Import
CVE-2026-105646
### Impact A crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploit
Ghost: Server-Side Request Forgery in Bookmark Fetching
CVE-2026-105647
### Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user
Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses
CVE-2026-105648
### Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user
Ghost: Stored XSS via SVG Uploads Bypassing Sanitization
CVE-2026-105649
### Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitizatio
Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages
CVE-2026-94544
Pending `use cache` fills are shared across requests for the same key without distinguishing Draft Mode requests from re
Next.js has cache poisoning of SSG and ISR pages in self-hosted applications
CVE-2026-94543
Self-hosted Next.js applications that use the Pages Router with statically generated (SSG) or incrementally regenerated
Next.js has information disclosure in development server's Model Context Protocol endpoint
CVE-2026-94486
The Next.js development server (`next dev`) exposes a Model Context Protocol endpoint that does not verify which website
Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass
CVE-2026-94485
In Next.js App Router applications built with webpack, metadata image routes such as opengraph-image and twitter-image i
Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service
CVE-2026-94484
Next.js applications that use a root-level catch-all page together with statically generated or Incremental Static Regen