https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:31:52 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-785 certfr-2022-avi-785 https://cve.radiocsirt.org/vuln/certfr-2022-avi-785 https://cve.radiocsirt.org/vuln/cnvd-2022-55154 cnvd-2022-55154 https://cve.radiocsirt.org/vuln/cnvd-2022-55154 https://cve.radiocsirt.org/vuln/euvd-2026-164838 EUVD-2026-164838 https://cve.radiocsirt.org/vuln/euvd-2026-164838 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21803 <p>This affects the package nconf before 0.11.4. When using the memory engine, it is possible to store a nested JSON representation of the configuration. The .set() function, that is responsible for setting the configuration properties, is vulnerable to Prototype Pollution. By providing a crafted property, it is possible to modify the properties on the Object.prototype.</p> <p>This affects the package nconf before 0.11.4. When using the memory engine, it is possible to store a nested JSON representation of the configuration. The .set() function, that is responsible for setting the configuration properties, is vulnerable to Prototype Pollution. By providing a crafted property, it is possible to modify the properties on the Object.prototype.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-21803 https://cve.radiocsirt.org/vuln/ghsa-6xwr-q98w-rvg7 <p><strong>Affected:</strong> npm: nconf</p> <p>nconf before 0.11.4. When using the memory engine, it is possible to store a nested JSON representation of the configuration. The .set() function, that is responsible for setting the configuration properties, is vulnerable to Prototype Pollution. By providing a crafted property, it is possible to modify the properties on the Object.prototype.</p> <p><strong>Affected:</strong> npm: nconf</p> <p>nconf before 0.11.4. When using the memory engine, it is possible to store a nested JSON representation of the configuration. The .set() function, that is responsible for setting the configuration properties, is vulnerable to Prototype Pollution. By providing a crafted property, it is possible to modify the properties on the Object.prototype.</p> https://cve.radiocsirt.org/vuln/ghsa-6xwr-q98w-rvg7 https://cve.radiocsirt.org/vuln/gsd-2022-21803 gsd-2022-21803 https://cve.radiocsirt.org/vuln/gsd-2022-21803 https://cve.radiocsirt.org/vuln/rhsa-2022:1681 <p>vm2: vulnerable to Sandbox Bypass golang.org/x/crypto: empty plaintext packet causes panic follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor node-fetch: exposure of sensitive information to an unauthorized actor follow-redirects: Exposure of Sensitive Information via Authorization Header leak urijs: Authorization Bypass Through User-Controlled Key cross-fetch: Exposure of Private Personal Information to an Unauthorized Actor nconf: Prototype pollution in memory store nats-server: misusing the &#34;dynamically provisioned sandbox accounts&#34; feature authenticated user can obtain the privileges of the System account urijs: Leading white space bypasses protocol validation node-forge: Signature verification leniency in checking `digestAlgorithm` structure can lead to signature forgery node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery node-forge: Signature verification leniency in checking `DigestInfo` structure Moment.js: Path traversal in moment.locale</p> <p>vm2: vulnerable to Sandbox Bypass golang.org/x/crypto: empty plaintext packet causes panic follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor node-fetch: exposure of sensitive information to an unauthorized actor follow-redirects: Exposure of Sensitive Information via Authorization Header leak urijs: Authorization Bypass Through User-Controlled Key cross-fetch: Exposure of Private Personal Information to an Unauthorized Actor nconf: Prototype pollution in memory store nats-server: misusing the &#34;dynamically provisioned sandbox accounts&#34; feature authenticated user can obtain the privileges of the System account urijs: Leading white space bypasses protocol validation node-forge: Signature verification leniency in checking `digestAlgorithm` structure can lead to signature forgery node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery node-forge: Signature verification leniency in checking `DigestInfo` structure Moment.js: Path traversal in moment.locale</p> https://cve.radiocsirt.org/vuln/rhsa-2022:1681 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0491 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Advanced Cluster Management ausnutzen, um Daten zu manipulieren, einen Denial of Service zu verursachen oder Informationen offenzulagen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Advanced Cluster Management ausnutzen, um Daten zu manipulieren, einen Denial of Service zu verursachen oder Informationen offenzulagen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0491