漏洞公告

Code Injection in PyXDG

express-basic-auth Timing Attack due to native string comparison instead of constant time string comparison

Prototype Pollution in upmerge

Insecure Default Configuration in redbird

Regular Expression Denial of Service in remarkable

Signature Verification Bypass in jwt-simple

Duplicate Advisory: Regular Expression Denial of Service in braces

Path Traversal in servey

SQL Injection in typeorm

Cross-site Scriptin in JSPWiki

Cross-site Scripting in JSPWiki

Cross-Site Scripting in JSPWiki

Command Injection in dot

Regular Expression Denial of Service in clean-css

Insecure Default Configuration in tesseract.js

Sensitive Data Exposure in sequelize-cli

Denial of Service in js-yaml

Denial of Service in canvas

Denial of Service in url-relative

Path Traversal in statics-server

Marked ReDoS due to email addresses being evaluated in quadratic time

Prototype Pollution in handlebars

High severity vulnerability that affects gun