Open Source Vulnerabilities

knative-eventing-fips-1.24-filter

knative-eventing-fips-1.24-filter

knative-eventing-fips-1.24-filter

knative-eventing-fips-1.24-filter

decode-uri-component: Denial of service via quadratic replacement of percent-encoded runs

ingress-nginx-controller-1.15, ingress-nginx-controller-1.15

ingress-nginx-controller-1.15, ingress-nginx-controller-1.15

@hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths

Vite: `server.fs.deny` bypassed with queries

Happy DOM: Cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies

scala-3.3

scala-3.3

scala-3.3

scala-3.3

scala-3.3

scala-3.3

scala-3.3

scala-3.3

Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML

@happy-dom/server-renderer: ServerRendererServer Target-Origin Bypass SSRF / Open Proxy

knative-eventing-1.24-filter

knative-eventing-1.24-filter

knative-eventing-1.24-filter

knative-eventing-1.24-filter

golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

samba

Echo: Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3, golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo

samba, samba, samba, samba, samba, samba, samba, samba

Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers

Echo: Open Redirect via Control-Character Prefix Defeating sanitizeURI

knative-eventing-1.24-webhook

knative-eventing-1.24-webhook

knative-eventing-1.24-webhook

knative-eventing-1.24-webhook

knative-eventing-1.24-jobsink

knative-eventing-1.24-jobsink

knative-eventing-1.24-jobsink

knative-eventing-1.24-jobsink