漏洞公告

elFinder MySQL has a SQL Injection in its Volume Driver (elFinderVolumeMySQL)

Valtimo has sensitive data exposure through HTTP request/response logging in LoggingRestClientCustomizer

@theecryptochad/merge-guard has Prototype Pollution in its deepMerge() function

@rvf/set-get has a prototype pollution issue that's reachable via @rvf/core preprocessFormData (HTTP form data)

CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE

Next.js vulnerable to cross-site scripting in App Router applications using CSP nonces

Next.js vulnerable to cache poisoning via collisions in React Server Component cache-busting

Next.js has cross-site scripting in beforeInteractive scripts with untrusted input

Next.js vulnerable to Denial of Service via connection exhaustion in applications using Cache Components

Next.js has a Denial of Service in the Image Optimization API

Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades

Next.js vulnerable to cache poisoning in React Server Component responses

Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes

Next.js has a Middleware / Proxy bypass through dynamic route parameter injection

Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n

Ella Core has handover failures during concurrent Security Mode Command

Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest

Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse

python-liquid: Absolute paths escape filesystem loader search path

oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS)

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

urllib3: Sensitive headers forwarded across origins in proxied low-level redirects

@vitejs/plugin-rsc has a Denial of Service Vulnerability in React Server Components