Open Source Vulnerabilities

knative-eventing-1.24-filter

knative-eventing-1.24-filter

knative-eventing-1.24-filter

golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

samba

Echo: Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

samba, samba, samba, samba, samba, samba, samba, samba

Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers

Echo: Open Redirect via Control-Character Prefix Defeating sanitizeURI

knative-eventing-1.24-webhook

knative-eventing-1.24-webhook

knative-eventing-1.24-webhook

knative-eventing-1.24-webhook

knative-eventing-1.24-jobsink

knative-eventing-1.24-jobsink

knative-eventing-1.24-jobsink

knative-eventing-1.24-jobsink

knative-eventing-1.24-ingress

knative-eventing-1.24-ingress

knative-eventing-1.24-ingress

knative-eventing-1.24-ingress

Echo: Static Middleware Double-Unescape Path Traversal

knative-eventing-fips-1.24-channel-dispatcher

knative-eventing-fips-1.24-channel-dispatcher

knative-eventing-fips-1.24-channel-dispatcher

knative-eventing-fips-1.24-channel-dispatcher

Echo static file middleware route protection bypass via encoded dot-dot traversal

@highcharts/dashboards, @highcharts/grid-pro

Highcharts Grid: `javascript:` URL in credits.href runs script on click

@highcharts/grid-lite, @highcharts/grid-pro

Highcharts Grid parses pagination language options as HTML

@highcharts/dashboards

Highcharts Dashboards parses fullscreen labels as HTML

@highcharts/dashboards

Highcharts Dashboards parses sidebar component labels as HTML

highcharts, highcharts, highcharts

Highcharts: `javascript:` URL in credits.href runs script on click

highcharts, highcharts, highcharts

Highcharts: dotted series.keys paths write to Object.prototype

highcharts

Highcharts: series column construction writes to Object.prototype

highcharts, highcharts, highcharts

Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes

@highcharts/grid-pro, @highcharts/dashboards

Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`

@highcharts/grid-lite, @highcharts/grid-pro

Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`

@highcharts/dashboards

Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace