Medium
CVE-2026-114121
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 541
Reset filters
Medium
CVE-2026-103004
next.js cache leak across root param values in nested 'use cache' functions
Low
ghsa-c6gr-qvv4-5v3f
DOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xml
Medium
CVE-2026-110871
Nodemailer: Quadratic (O(n^2)) DKIM header unfolding lets a large folded header cause remote denial of service during signing
High
CVE-2026-111758
markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)
A denial-of-service vulnerability in markdown-it allows remote attackers to block the Node.js event loop via crafted multi-line link reference definitions. Processing unclosed definitions causes quadratic execution time under default configurations.
Low
CVE-2026-111766
markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled
When HTML is enabled in markdown-it, parsing repeated unterminated HTML constructs takes quadratic time. This allows crafted input to block the Node.js event loop and lead to denial of service.
Medium
CVE-2026-113664
ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test
A substring check in ApostropheCMS import-export tar extraction fails to catch relative directory traversal paths, allowing authenticated users to crash the Node process.
High
CVE-2026-111752
@angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)
A denial-of-service vulnerability in Angular Router affects Server-Side Rendering (SSR) on Node.js. Unauthenticated remote attackers can send crafted URLs with empty-path outlet segments to exhaust memory heap or CPU resources, causing worker process crashes and service disruption.
Medium
CVE-2026-103975
Appium: Symlink based Zip Slip in @appium/support ZIP extraction
A vulnerability in the ZIP extraction functionality of @appium/support allows arbitrary file writes via crafted symlinks pointing outside the extraction directory. An attacker supplying a malicious archive could overwrite files or potentially achieve code execution with the permissions of the running process.
High
CVE-2026-100409
OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths
In OpenNext Cloudflare, enabled cache interception can evaluate encoded paths inconsistently, allowing attackers to bypass authorization middleware and retrieve cached route content.
High
CVE-2026-108259
Tina: Code injection via unescaped Git branch name in generated client source
A code injection vulnerability in TinaCMS CLI allows arbitrary JavaScript execution during project builds when an unescaped Git branch name is embedded directly into generated client source files.
High
CVE-2026-107724
fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery
High
CVE-2026-61426
PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure
Medium
CVE-2026-107388
music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS
Medium
CVE-2026-106444
Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates
Medium
CVE-2026-94544
Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages
Medium
CVE-2026-94543
Next.js has cache poisoning of SSG and ISR pages in self-hosted applications
Low
CVE-2026-94486
Next.js has information disclosure in development server's Model Context Protocol endpoint
Medium
CVE-2026-94485
Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass
Medium
CVE-2026-94484
Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service
High
CVE-2026-94483
Next.js has Server-Side Request Forgery in Image Optimization
Medium
CVE-2026-105846
Payload: Untrusted redirect URL parameter exploit
Low
CVE-2026-105800
i18next-http-backend incomplete URL validation permits SSRF
High
CVE-2026-102826
simple-git allows command execution through unblocked Git configuration includes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.