Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
H Heap-based Buffer Overflow	libvips/libvips[,8.16.1)	Unmanaged (C/C++)	8 Apr 2025
M Use After Free	openharmony/arkcompiler_ets_runtime[,5.0.2)	Unmanaged (C/C++)	8 Apr 2025
M Incomplete List of Disallowed Inputs	picklescan[,0.0.25)	pip	8 Apr 2025
M Deserialization of Untrusted Data	picklescan[,0.0.25)	pip	8 Apr 2025
H Incomplete List of Disallowed Inputs	picklescan[,0.0.25)	pip	8 Apr 2025
H Allocation of Resources Without Limits or Throttling	@apollo/gateway<2.10.1	npm	8 Apr 2025
H Allocation of Resources Without Limits or Throttling	@apollo/gateway<2.10.1	npm	8 Apr 2025
M Improper Handling of Case Sensitivity	flask-cors[0,]	pip	7 Apr 2025
M Improper Verification of Source of a Communication Channel	flask-cors[0,]	pip	7 Apr 2025
M Origin Validation Error	flask-cors[0,]	pip	7 Apr 2025
M Regular Expression Denial of Service (ReDoS)	@mozilla/readability<0.6.0	npm	7 Apr 2025
M Prototype Pollution	tarteaucitronjs<1.20.1	npm	7 Apr 2025
M Cross-site Scripting (XSS)	tarteaucitronjs<1.20.1	npm	7 Apr 2025
M Use of Uninitialized Resource	armmbed/mbedtls[,2.28.10)[3.0.0,3.6.3)	Unmanaged (C/C++)	7 Apr 2025
H Denial of Service (DoS)	hyperlpr3[0,]	pip	7 Apr 2025
C Missing Authentication for Critical Function	langflow[,1.3.0)	pip	7 Apr 2025
M Authentication Bypass Using an Alternate Path or Channel	org.graylog2:graylog2-server[6.1.0,6.1.9)	Maven	7 Apr 2025
M Use After Free	openharmony/communication_dsoftbus[,5.0.2)	Unmanaged (C/C++)	7 Apr 2025
M Cross-site Scripting (XSS)	github.com/mccutchen/go-httpbin/v2/httpbin<2.18.0	Go	7 Apr 2025
M Cross-site Scripting (XSS)	github.com/mccutchen/go-httpbin/v2/httpbin/cmd<2.18.0	Go	7 Apr 2025
M Cross-site Scripting (XSS)	github.com/mccutchen/go-httpbin/httpbin<2.18.0	Go	7 Apr 2025
M Cross-site Scripting (XSS)	github.com/mccutchen/go-httpbin/httpbin/cmd<2.18.0	Go	7 Apr 2025
M Insecure Default Initialization of Resource	armmbed/mbedtls[,2.28.10)[3.0.0,3.6.3)	Unmanaged (C/C++)	7 Apr 2025
M Insecure Default Initialization of Resource	cuberite/polarssl[0,]	Unmanaged (C/C++)	7 Apr 2025
H SQL Injection	vanna[0,]	pip	7 Apr 2025
C Malicious Package	xnil-server*	npm	7 Apr 2025
C Malicious Package	sasha-web3-utils*	npm	7 Apr 2025
C Malicious Package	sasha-bsc-utils*	npm	7 Apr 2025
C Malicious Package	boss-traceid*	npm	7 Apr 2025
C Malicious Package	jito-encryption*	npm	7 Apr 2025

APPLICATION

OPERATING SYSTEM