Jodit has prototype pollution via Jodit.configure() / ConfigMerge
CVE-2026-54756
### Summary `Jodit.configure(options)` — and the internal `ConfigMerge` / `ConfigProto` helpers — merged user-supplied o
#severity:medium
共收录 5514 条相关情报。
← 返回所有主题Jodit has incomplete javascript: scheme normalization in sanitizeHTMLElement href check that allows link XSS
CVE-2026-62324
### Summary jodit's `sanitizeHTMLElement` neutralizes a `javascript:` `href` using a bare `href.trim().indexOf('javascr
Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on...
CVE-2026-34490
Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attac
Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows...
CVE-2026-59231
Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to
Cross-site Scripting in the lead index view in Roskus Prospero Flow CRM before 5.3.7 allows...
CVE-2026-59232
Cross-site Scripting in the lead index view in Roskus Prospero Flow CRM before 5.3.7 allows authenticated users holding
HTTP Smuggling in cPanel allows potential leak of credentials.
CVE-2026-58047
HTTP Smuggling in cPanel allows potential leak of credentials.
HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public...
CVE-2026-56569
HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal config
Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems...
CVE-2026-21662
Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malic
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in...
CVE-2026-34497
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Johnson Controls FM Syste
Improper neutralization of input during web page generation ('cross-site scripting')...
CVE-2026-34495
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls F
HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities. It involves the...
CVE-2026-56567
HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities. It involves the public exposure of intern
In SERVER mode, pgAdmin 4 enforces authentication per route via the @pga_login_required decorator...
CVE-2026-17348
In SERVER mode, pgAdmin 4 enforces authentication per route via the @pga_login_required decorator; the application's bef
HCL iControl was affected by Improper Input Validation vulnerability. It is vulnerable to...
CVE-2025-62347
HCL iControl was affected by Improper Input Validation vulnerability. It is vulnerable to unexpected system behavior and
The per-tool permission system (custom roles / role-based tool permissions, introduced in pgAdmin...
CVE-2026-17350
The per-tool permission system (custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3) did not enforce
Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation)
CVE-2026-65835
### Summary CVE-2026-22872 (GHSA-qjjm-7j9w-pw72) reported that a Tenant Owner could create cluster-scoped resources (e.g
Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests
CVE-2026-65834
### Summary `CapsuleConfiguration.Spec.NodeMetadata.ForbiddenLabels.Regex` and `ForbiddenAnnotations.Regex` are never v
re2: Out-of-bounds heap read in `exec`/`test`/`match` via attacker-influenced `lastIndex` on a non-ASCII subject → uncatchable process crash (DoS)
CVE-2026-67550
## Summary `re2` validates the user-settable `lastIndex` against the subject's **UTF-8 byte length** but then uses it a
re2: Global `String.prototype.match` with an empty-matchable pattern never advances → infinite loop with unbounded native memory growth (DoS)
CVE-2026-68499
## Summary `String.prototype.match` with a **global** `RE2` collects all matches in a native loop that advances the cur
Sylius Mollie Plugin has unauthenticated IDOR that leaks order token and customer PII
CVE-2026-68501
### Impact Two unauthenticated Mollie shop endpoints look up orders by a sequential integer `orderId` with no ownership
`nx graph` dev server permissive CORS policy
CVE-2026-54753
## Summary The local HTTP server started by `nx graph` sent `Access-Control-Allow-Origin: *` on every response, letting