CVE Vulnerability Catalog

In Hono framework versions 4.3.3 through 4.12.26, the AWS API Gateway v1 adapter incorrectly de-duplicates header values using substring comparison instead of exact match. This causes distinct repeated header values to be dropped, affecting the completeness of data processed by middleware or application logic.

In Hono framework versions 4.11.8 through 4.12.26, a vulnerability was found where context values are not isolated per request during server-side rendering (SSR). This allows data from another concurrent request to be used after an await statement in an async component.

Vulnerability in Hono framework (versions 4.0.0 to 4.12.26) in the cx() function from hono/css. The function composes class names from plain strings but marks the result as already escaped without HTML-escaping the input, allowing untrusted className values used in a JSX class attribute during server-side rendering to break out of the attribute and inject arbitrary markup.

In setuptools prior to version 83.0.0, MANIFEST.in directives (exclude, global-exclude, recursive-exclude, prune) were applied without Unicode normalization, allowing on macOS APFS or HFS+ an NFD file name to bypass an NFC exclusion rule and be included in a source distribution.

In the Guzzle PHP HTTP client library prior to version 7.12.3, a vulnerability was found in the CookieJar class. The SetCookie::matchesDomain() method incorrectly handled IP addresses (e.g., 192.168.0.1, [::1]) and bare numeric values as domains by applying ordinary suffix matching, allowing cross-host cookie disclosure, cookie injection, or session fixation.

In the guzzlehttp/psr7 library prior to version 2.12.3, the Uri::assertValidHost() function does not reject invalid URI host components that may contain authority delimiters, embedded ports, or malformed IPv6 brackets. This causes Uri::getHost() to potentially return a value different from the actual URI authority, which can lead to errors in security or routing decisions.

The vulnerability allows de-anonymization of TLS handshakes using Encrypted Client Hello (ECH). A passive network observer can read pre-shared key (PSK) identities in the unencrypted part of the client hello.

In U-Boot through 2026.04-rc3, an out-of-bounds read vulnerability exists in tcp_rx_state_machine() (net/tcp.c) when CONFIG_PROT_TCP is enabled. A remote attacker can craft a malicious packet with mismatched IP total length and TCP data offset field, causing reads beyond TCP segment boundaries and potentially disrupting connection state.

A vulnerability in the protobufjs library allows infinite looping when parsing specially crafted .proto files. The lack of end-of-input checking when processing options causes parse, Root.load, or Root.loadSync to loop indefinitely.

A vulnerability in the protobufjs library (versions 8.2.0 to 8.6.5) allows prototype pollution via parsing map entries in Text Format. An attacker can inject a map key named __proto__, which modifies the object prototype instead of creating a map entry.

The node-tar library before version 7.5.17 does not strip NUL bytes from PAX path and linkpath records, allowing a crafted archive to cause an uncaught exception and terminate the Node.js process.

The node-tar library before version 7.5.18 coerces all-digit PAX path and linkpath values to JavaScript numbers, causing a TypeError during path processing. The issue is fixed in version 7.5.18.

A vulnerability in the js-yaml library (versions 5.0.0 through 5.2.0) causes quadratic CPU time when parsing YAML documents with merge keys enabled. A chain of mappings where each entry merges the previous one leads to excessive CPU load.

AFFiNE's histories GraphQL field fails to validate Doc.Read permission before exposing document edit history, allowing authenticated workspace members to retrieve restricted content timelines. Attackers can supply arbitrary document GUIDs to access full edit histories including user names, emails, and timestamps of private pages they lack access to.

CyberChef before version 11.2.0 contains a prototype pollution vulnerability in the Series Chart operation, which accepts the __proto__ key when parsing user-supplied CSV. This can be chained with other operations like Parse UDP to inject malicious JavaScript into HTML output.

A vulnerability in Portainer Community Edition allows an unauthenticated attacker to access restore and administrator initialization endpoints within five minutes of starting an uninitialized instance. The attacker can restore a crafted backup or create the first administrator account, gaining full administrative access.

A vulnerability in ToolJet before 3.20.180 allows shell command injection via pull request comments. The CI runner executes code from the comment, enabling theft of deployment secrets.

A flaw was found in the gorch service template, part of the trustyai-service-operator. Even when authentication is enabled, the gorch service exposes unproxied orchestrator and detector metrics ports, allowing any pod on the cluster network to directly access these ports, bypassing the kube-rbac-proxy and its authentication mechanisms.

A vulnerability in SeaweedFS versions 4.08 through 4.33 allows an authenticated low-privileged S3 user to enumerate administrator-owned table bucket names and ARNs. The issue stems from incorrect routing of SigV4 requests to the S3Tables management API, where authorization collapses account-less S3 identities into the shared admin account.

A vulnerability in File Browser before version 2.63.16 allows an authenticated user with Create and Modify permissions to create attacker-controlled files outside the user's scope. The issue arises because ScopedFs validates the nearest existing ancestor of a dangling symlink as in scope and then follows the symlink during file creation.