Open Source Vulnerabilities

knative-eventing-fips-1.24-channel-dispatcher

Echo static file middleware route protection bypass via encoded dot-dot traversal

@highcharts/dashboards, @highcharts/grid-pro

Highcharts Grid: `javascript:` URL in credits.href runs script on click

@highcharts/grid-lite, @highcharts/grid-pro

Highcharts Grid parses pagination language options as HTML

@highcharts/dashboards

Highcharts Dashboards parses fullscreen labels as HTML

@highcharts/dashboards

Highcharts Dashboards parses sidebar component labels as HTML

highcharts, highcharts, highcharts

Highcharts: `javascript:` URL in credits.href runs script on click

highcharts, highcharts, highcharts

Highcharts: dotted series.keys paths write to Object.prototype

highcharts

Highcharts: series column construction writes to Object.prototype

highcharts, highcharts, highcharts

Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes

@highcharts/grid-pro, @highcharts/dashboards

Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`

@highcharts/grid-lite, @highcharts/grid-pro

Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`

@highcharts/dashboards

Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace

@highcharts/dashboards, @highcharts/grid-pro

Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.

@highcharts/dashboards

Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype`

highcharts, highcharts

Highcharts Core: HTML text parsing falls back to unfiltered `innerHTML` during printing

crossplane-2.2, crossplane-2.2

highcharts, highcharts, highcharts

Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts

frankenphp-8.4

github.com/labstack/echo/v5, github.com/labstack/echo/v4

Echo's middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path

github.com/labstack/echo/v5, github.com/labstack/echo/v4

Echo vulnerable to Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob

github.com/labstack/echo/v5, github.com/labstack/echo/v4

Echo has Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration

github.com/labstack/echo/v5, github.com/labstack/echo/v4

Echo has CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method

github.com/labstack/echo/v5, github.com/labstack/echo/v4

Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default

mcp-sanitizer

mcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6

ascan, ascan

mcp-sanitizer

mcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths

knative-kafka-broker-1.21-controller

rucio, rucio, rucio

rucio has an Authorization Bypass on REST API endpoint for signing URLs

MySqlConnector

MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)

github.com/caddyserver/caddy/v2

Caddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through

Gearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP tools

knative-eventing-1.24-mtchannel-broker

knative-eventing-1.24-mtchannel-broker

knative-eventing-1.24-mtchannel-broker

knative-eventing-1.24-mtchannel-broker

Ember: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUI

Endatix: Blind second-order SSRF via anonymous form-submission file URLs (`SubmissionFileExtractor`)

crossplane-provider-grafana

knative-eventing-1.24-channel-controller

knative-eventing-1.24-channel-controller

knative-eventing-1.24-channel-controller

knative-eventing-1.24-channel-controller

knative-eventing-fips-1.24-controller

knative-eventing-fips-1.24-controller

knative-eventing-fips-1.24-controller

knative-eventing-fips-1.24-controller

Echo: Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration

knative-eventing-1.24-controller

knative-eventing-1.24-controller