Most recent entries from all

bdu:2022-06615

2026-10-02T16:56:00.731581+00:00

bdu:2022-06615

certfr-2023-avi-0869 — De multiples vulnérabilités ont été découvertes dans Zimbra
This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.

GHSA-h68q-55jf-x68w — Prototype pollution in chart.js

2026-10-02T16:56:00.731693+00:00

Affected: npm: chart.js

This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.

gsd-2020-7746

2026-10-02T16:56:00.731719+00:00

gsd-2020-7746

jvndb-2026-033235

2026-10-02T16:56:00.731731+00:00

CONPROSYS series provided by Contec Co., Ltd. contains multiple vulnerabilities listed below.

Cross-site scripting (CWE-79) - CVE-2026-82773, CVE-2026-82776, CVE-2026-82788
OS command injection (CWE-78) - CVE-2026-82774, CVE-2026-82777, CVE-2026-82779
Exposure of information through directory listing (CWE-548…

RHSA-2022:6813 — Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.1 security update

2026-10-02T16:56:00.731768+00:00

chart.js: prototype pollution jackson-databind: denial of service via a large depth of nested objects immer: type confusion vulnerability can lead to a bypass of CVE-2020-28477 minimist: prototype pollution node-fetch: exposure of sensitive information to an unauthorized actor parse-url: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url cross-fetch: Exposure of Private Personal Information to an Unauthorized Actor drools: unsafe data deserialization in StreamUtils eventsource: Exposure of Sensitive Information Business-central: Possible XML External Entity Injection attack mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes xerces-j2: infinite loop when handling specially crafted XML document payloads artemis-commons: Apache ActiveMQ Artemis DoS node-forge: Signature verification leniency in checking `digestAlgorithm` structure can lead to signature forgery node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery Moment.js: Path traversal in moment.locale postgresql-jdbc: Arbitrary File Write Vulnerability moment: inefficient parsing algorithm resulting in DoS

UBUNTU-CVE-2020-7746

2026-10-02T16:56:00.731823+00:00

Affected: Ubuntu:20.04:LTS: node-chart.js