Jonathan Leitschuh

Microsoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header Validation

Rob--W cors-anywhere Misconfigured CORS Proxy Allows SSRF

Versions of the package io.pebbletemplates:pebble from 0 and before 4.1.0 are vulnerable to External Control of File Name or Path via the include tag. A high privileged attacker can access sensitive local files by crafting malicious notification templates

Apache Submarine Commons Utils: default secret

Apache Hop Engine: ID isn't escaped when generating HTML

Apache Helix Front (UI): Helix front hard-coded secret in the express-session

Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged

Apache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider

Arbitrary File Write via Archive Extraction (Zip Slip)

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider() function in StdTempFileProvider.java, which uses the permissive File.createTempFile() function, exposing tempora