漏洞公告

Directory Traversal in jikes

Sandbox Breakout / Arbitrary Code Execution in static-eval

Open Redirect in st

Directory Traversal in elding

coffescript is malware

cofee-script is malware

coffe-script is malware

cofeescript is malware

Directory Traversal in ritp

restforce vulnerable to Improper Input Validation

Moderate severity vulnerability that affects moment

npm Token Leak in npm

Moderate severity vulnerability that affects is-my-json-valid

Regular Expression Denial of Service in hawk

Downloads Resources over HTTP in react-native-baidu-voice-synthesizer

Downloads Resources over HTTP in alto-saxophone

Downloads Resources over HTTP in haxeshim

windows-seleniumjar downloads Resources over HTTP

Command Injection in whereis

PyCA Cryptography vulnerable to GCM tag forgery

High severity vulnerability that affects rubyzip

Nokogiri implementation of libxslt lacks integer overflow checks

Missing Regex anchor in Rack-Cors allows malicious third party site to perform CORS request