漏洞公告

Client TLS credentials sent raw to server in npm package nats

Directory exposure in jetty

Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources

Authorization Before Parsing and Canonicalization in jetty

Command Injection Vulnerability in systeminformation

ApiKey secret could be revelated on network issue

Potential sensitive information disclosed in error reports

Regular expression Denial of Service in multiple packages

Command injection vulnerability in @prisma/sdk in getPackedPackage function

Arbitrary Command Injection in portprocesses

Potential XSS injection in the newsletter conditions field

Misuse of `Reference` and other transferable APIs may lead to access to nodejs isolate

[thi.ng/egf] Potential arbitrary code execution of `#gpg`-tagged property values

Discovery uses the same AES/GCM Nonce throughout the session

Mautic vulnerable to secret data exfiltration via symfony parameters

Netflix/Priam: Temporary Directory Information Disclosure

Possible request smuggling in HTTP/2 due missing validation of content-length

netmask npm package mishandles octal input data

Out-of-bounds write

Out-of-bounds write

Out-of-bounds write

Out-of-bounds write

Out-of-bounds write