Prototype pollution in @feathersjs/commons _.merge via JSON-parsed __proto__
CVE-2026-54335
### Impact The `_.merge(target, source)` utility exported by `@feathersjs/commons` recursively merges `source` into `ta
#severity:low
共收录 1585 条相关情报。
← 返回所有主题A vulnerability has been found in nextlevelbuilder GoClaw 3.13.3-beta.3. Affected by this...
CVE-2026-15624
A vulnerability has been found in nextlevelbuilder GoClaw 3.13.3-beta.3. Affected by this vulnerability is the function
A vulnerability was found in nextlevelbuilder GoClaw 3.11.3. Affected by this issue is the...
CVE-2026-15625
A vulnerability was found in nextlevelbuilder GoClaw 3.11.3. Affected by this issue is the function ExecApprovalManager.
SAP HANA Database (user self service tools) allows an unauthenticated user to send specially...
CVE-2026-44753
SAP HANA Database (user self service tools) allows an unauthenticated user to send specially crafted requests that produ
A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects the...
CVE-2026-15620
A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects the function tools.webFetch of
A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the...
CVE-2026-15618
A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the function guardExecComma
A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is the...
CVE-2026-15619
A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is the function web_fetch of the fi
A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the...
CVE-2026-15607
A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the fi
A security vulnerability has been detected in wandb 0.25.2.dev1. Affected is the function...
CVE-2026-15605
A security vulnerability has been detected in wandb 0.25.2.dev1. Affected is the function ArtifactManifestEntry.download
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The...
CVE-2026-15596
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unkno
A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function...
CVE-2026-15594
A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the l
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The...
CVE-2026-15595
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unkno
A security vulnerability has been detected in alioshr memory-bank-mcp up to 0.2.1/3.1. This...
CVE-2026-15524
A security vulnerability has been detected in alioshr memory-bank-mcp up to 0.2.1/3.1. This affects an unknown part of t
A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected...
CVE-2026-15523
A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some un
A vulnerability has been found in AREA 17 Twill CMS up to 3.6.0. The impacted element is the...
CVE-2026-15518
A vulnerability has been found in AREA 17 Twill CMS up to 3.6.0. The impacted element is the function FileLibraryControl
A vulnerability was identified in makafeli n8n-workflow-builder up to 0.11.0. Affected is an...
CVE-2026-15521
A vulnerability was identified in makafeli n8n-workflow-builder up to 0.11.0. Affected is an unknown function of the fil
A vulnerability was detected in kLOsk adloop up to 0.9.0. This vulnerability affects the function...
CVE-2026-15525
A vulnerability was detected in kLOsk adloop up to 0.9.0. This vulnerability affects the function _validate_urls of the
A vulnerability was found in usestrix strix up to 1.0.2. This affects an unknown function of the...
CVE-2026-15519
A vulnerability was found in usestrix strix up to 1.0.2. This affects an unknown function of the file system_prompt.jinj
A security flaw has been discovered in tugcantopaloglu godot-mcp 2.0.0. Affected by this...
CVE-2026-15522
A security flaw has been discovered in tugcantopaloglu godot-mcp 2.0.0. Affected by this vulnerability is the function v
A vulnerability was determined in GNU LibreDWG 0.13.4-154-g0b573035. This impacts the function...
CVE-2026-15520
A vulnerability was determined in GNU LibreDWG 0.13.4-154-g0b573035. This impacts the function decompress_R2004_section