MEDIUM6.1CVE-2026-47250MCP Server Kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration
MEDIUM5.3Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths
MEDIUM5.3Hono: IP Restriction bypasses static deny rules for non-canonical IPv6
MEDIUM4.3Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection
MEDIUM4.8Hono: JWT middleware accepts any Authorization scheme, not only Bearer
MEDIUM6.5EPSS 0.02%browserstack-runner has an unauthenticated arbitrary file read via path traversal in HTTP server
MEDIUM5.4EPSS 0.03%React Router has stored XSS via unescaped Location header in prerendered redirect HTML
MEDIUM5.3EPSS 0.06%ExifReader is vulnerable to denial of service via unbounded decompression of image metadata
MEDIUM4.8axios has DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions
MEDIUM5.5Shamefile has an arbitrary file read via shamefile.yaml in shame next
MEDIUM6.5EPSS 0.07%A flaw was found in Samba’s vfs_worm module.
MEDIUM5.3LiquidJS's `{% render %}` tag silently bypasses per-render `ownPropertyOnly:true` via `Context.spawn()`
MEDIUM6.5LiquidJS has a renderLimit DoS guard bypass via empty `{% for %}` body
MEDIUM6.1LiquidJS's strip_html filter bypass via newline characters in HTML tags enables XSS
MEDIUM5.3EPSS 0.25%A flaw was found in gnutls.
MEDIUM6.1EPSS 0.03%CryptPad has a Sanitizer Bypass in Diffmarked.js that Allows Arbitrary HTML Injection and Potential XSS
MEDIUM5.4EPSS 0.05%Typebot.io has stored XSS via `javascript`: URI in text bubble links — bot author executes JS on visitors' browsers
MEDIUM5.3EPSS 0.07%Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override…
MEDIUM6.5EPSS 0.03%Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol.
MEDIUM5.3EPSS 0.04%qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set
MEDIUM5.8NocoDB: Shared-base link access can invite arbitrary users as persistent base members
MEDIUM6.5NocoDB: Missing File Size Enforcement in Upload-by-URL Allows Denial of Service via Disk Exhaustion
MEDIUM5.4NocoDB: Refresh Token Cookie Set Without `secure` and `sameSite` Flags