Watching 44 sources · checked 7 h ago
Changes
- 2158
- in the catalog
- 1153
- new this week
- 62
- dated ahead
RubyGems packages15 h agoactionview: Possible XSS vulnerability in Action View highlight helpersecurity+3RubyGems packages15 h agoactionpack: Possible sensitive session information leak in Active Storage proxy modesecurity+6
PyPI packages15 h agoopenai 0.28.1 → 3.41.0: changes parameters of 5 function(s)breaks on upgrade+212026-11
“brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion”osv.dev ›
“brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash”osv.dev ›
“brace-expansion: Quadratic-time expansion of the {a},b} rewrite causes CPU denial of service”osv.dev ›
“brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion”osv.dev ›
“brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation”osv.dev ›
“Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)”osv.dev ›
“Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM”osv.dev ›
“esbuild enables any website to send any requests to the development server and read the response”osv.dev ›
2026-10
“browserify-sign upper bound check issue in dsaVerify leads to a signature forgery attack”osv.dev ›
“cipher-base is missing type checks, leading to hash rewind and passing on crafted data”osv.dev ›
“crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard”osv.dev ›
“decode-uri-component vulnerable to denial of service via quadratic replacement of percent-encoded runs”osv.dev ›
“decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input”osv.dev ›
“DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation”osv.dev ›
“DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes”osv.dev ›
“DOMPurify: Hook mutation of data.allowedTags / data.allowedAttributes permanently pollutes DEFAULT_ALLOWED_TAGS / DEFAULT_ALLOWED_ATTR”osv.dev ›
“DOMPurify: CUSTOM_ELEMENT_HANDLING bypasses afterSanitizeElements for allowed custom elements.”osv.dev ›
“DOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xml”osv.dev ›
“DOMPurify: Permanent ALLOWED_ATTR pollution via setConfig() bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch)”osv.dev ›
“DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modes”osv.dev ›
“DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)”osv.dev ›
“DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound instanceof checks”osv.dev ›
“DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)”osv.dev ›
“DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM”osv.dev ›
“DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content”osv.dev ›
“DOMPurify: Trusted Types policy survives clearConfig() and can poison later RETURN_TRUSTED_TYPE output”osv.dev ›
“DOMPurify: IN_PLACE mode trusts attacker-controlled nodeName on live non-form nodes, allowing script retention and XSS via attacker-supplied DOM objects”osv.dev ›
“Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)”osv.dev ›
“es5-ext vulnerable to Regular Expression Denial of Service in function#copy and function#toStringTokens”osv.dev ›
