Axios versions from 1.15.2 up to but not including 1.16.0 contain a vulnerability where nested objects created by utils.merge() are plain objects inheriting from Object.prototype. This allows an attacker to inject properties such as username and password into the proxy configuration, leading to the construction of a Proxy-Authorization header with attacker-controlled credentials. This header is then injected into every proxied HTTP request. The issue is fixed in version 1.16.0.
Axios versions prior to 0.32.0 and 1.16.0 contain two prototype pollution-related vulnerabilities. These issues arise when Object.prototype is polluted by an upstream dependency, causing axios to incorporate polluted values silently or throw synchronous TypeErrors on requests. The vulnerabilities are fixed in versions 0.32.0 and 1.16.0.
Axios versions from 0.19.0 up to but not including 0.31.1 and 1.15.2 contain prototype-pollution gadgets in request configuration processing. This vulnerability does not create prototype pollution itself but can be exploited if another vulnerability has already polluted Object.prototype. Exploitability requires prior attacker control over Object.prototype before Axios processes a request. The issue is fixed in versions 0.31.1 and 1.15.2.
Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line have a vulnerability where a regular expression is built from the configured XSRF cookie name without escaping regex metacharacters. This can cause expensive regex backtracking in browsers, leading to client-side availability degradation such as freezing the browser tab during request preparation. The issue does not affect Node.js HTTP adapter usage, React Native, or web workers. The vulnerability is fixed in versions 0.32.0 and 1.16.0.
Node js-cookie versions prior to 3.0.7 contain a prototype pollution vulnerability in the internal assign() helper. This occurs because the helper copies properties using for...in enumeration and plain assignment, which allows attacker-controlled __proto__ properties from JSON-parsed objects to hijack the prototype of merged attribute objects. This leads to attacker-controlled cookie attributes such as domain, secure, samesite, expires, and path being set unexpectedly. The issue is patched in version 3.0.7.
A use-after-free vulnerability exists in the X.Org X server and Xwayland in the miSyncDestroyFence() function. This flaw can be triggered by a client setting up multiple fence triggers, leading to a use-after-free function pointer call. Exploitation requires connecting to the X server to set up and await a fence, while a second connection destroys the fence, causing the use-after-free. This can result in a server crash or privilege escalation if the X server runs with root privileges.
A stack-based buffer overflow vulnerability exists in the X.Org X server and Xwayland due to improper validation of key types in CheckKeyTypes(). This flaw allows a client to specify excessive shift levels, potentially causing a stack overflow. The issue is a result of an incomplete fix for a previous vulnerability (CVE-2025-26597). Exploitation may lead to server crashes or privilege escalation if the X server runs with root privileges.
A stack-based buffer overflow vulnerability exists in the X.Org X server and Xwayland in the _XkbSetMapChecks() function due to improper bounds checking on a fixed-size buffer. This flaw allows a client to write beyond the buffer limits, potentially causing a server crash or privilege escalation if the server runs with root privileges. The vulnerability affects multiple specific versions of the xorg-server package. The CVSS score is 7.8, indicating a high impact on confidentiality, integrity, and availability, but the attack vector requires local access with low privileges.
A use-after-free vulnerability exists in the X.Org X server and Xwayland within the FreeCounter() function. This flaw can be triggered by a client that sets up multiple SyncCounters and waits on those triggers, then destroys those counters via a second client connection. Exploitation may lead to server crashes or privilege escalation if the X server is running as root. The vulnerability affects specific Ubuntu package versions of xorg-server. The CVSS score is 7.8, indicating a medium severity level.
A use-after-free vulnerability exists in the X.Org X server and Xwayland within the SyncChangeCounter() function. This flaw can be triggered by a client setting up multiple SyncCounters and then destroying them via a second client connection while changing those counters. Exploitation may lead to server crashes or privilege escalation if the X server is running with root privileges.
An out-of-bounds read vulnerability exists in the X.Org X server and Xwayland within the __glXDisp_ChangeDrawableAttributes() function. This flaw involves improper size validation, allowing a client to read beyond the intended buffer, potentially disclosing information. A write vulnerability path also exists but requires byte-swapped clients, which are disabled by default. The issue affects specific versions of the xorg-server package. The vulnerability has a medium severity rating with a CVSS score of 5.5.
A use-after-free vulnerability exists in the X.Org X server and Xwayland within the CreateSaverWindow() function. This flaw can be triggered by a client changing window attributes and forcing the screen saver, resulting in a use-after-free read that may lead to information disclosure. The vulnerability has a medium severity rating with a CVSS score of 5.5.
An out-of-bounds write vulnerability exists in the X.Org X server and Xwayland components within the DRIGetBuffers and DRIGetBuffersWithFormat functions. This flaw can be triggered by a client requesting multiple DRI2BufferBackLeft attachments along with one DRI2BufferFrontLeft, leading to a heap write outside the intended memory bounds. Exploitation may cause the X server to crash or potentially allow privilege escalation if the server runs with root privileges.
Znuny LTS versions before 6.5.21 and Znuny versions before 7.3.3 contain a reflected cross-site scripting (XSS) vulnerability in the AdminCommunicationLog, the communication log administration view. This vulnerability allows an attacker with low privileges to inject malicious scripts that can affect confidentiality and integrity but does not impact availability. The CVSS score is 6.4, indicating a medium severity level. Multiple specific versions of the Otrs2 product are affected. No vendor advisory or patch information is provided, so patch status is not confirmed.
OpenStack Ironic versions before 37.0.0 contain a vulnerability where an unauthenticated attacker can submit a crafted JSON string to certain API or JSON-RPC endpoints, causing the service to crash. This results in a denial of service condition. The vulnerability has a CVSS score of 7.5, indicating a medium severity impact focused on availability disruption. Multiple Ubuntu package versions of Ironic are affected. No specific patch information is provided in the input data.
Python aiohttp versions prior to 3.14.0 have a vulnerability where cookies set via the cookies parameter on requests are sent after following a cross-origin redirect. This behavior can lead to sensitive cookie data being leaked if an attacker controls the redirect. Version 3.14.0 addresses this issue. Using a Cookie header in the headers parameter is not vulnerable.
A path traversal vulnerability exists in the Apache MINA SSHD bundle sshd-git component. This flaw allows authenticated SSH users to access git repositories outside the configured git server root directory due to lack of path validation in git-upload-pack, git-receive-pack, and other git operations. The vulnerability affects applications using org.apache.sshd:sshd-git. It is fixed in Apache MINA SSHD version 2.18.0 and in the 3.0.0-M4 milestone release. Users are advised to upgrade to these versions to remediate the issue.
Apache ActiveMQ versions before 5.19.7 and from 6.0.0 before 6.2.6 have an incorrect default permissions vulnerability. The default Jolokia authorization settings allowed low-privilege web-login accounts to perform broker management operations intended only for administrators, such as adding or removing queues. This could lead to unauthorized management actions on the message broker. Upgrading to versions 5.19.7 or 6.2.6 or later resolves this issue.
Apache ActiveMQ Broker versions before 5.19.7 and from 6.0.0 before 6.2.6 have a vulnerability where an unauthenticated attacker can obtain sensitive metadata about durable topic subscriptions. This includes client identifiers, subscription names, topic destinations, and JMS selector expressions. The issue arises when the broker responds to a BrokerInfo command without verifying authentication if the network connector is configured with syncDurableSubs set to true. Upgrading to versions 5.19.7 or 6.2.6 resolves this vulnerability.
CVE-2026-49387 is a medium severity vulnerability affecting multiple specific versions of the Netatalk software. The exact nature and technical details of the vulnerability are unknown based on the provided data. There is no CVSS score or detailed description available, and no known exploits in the wild have been reported. The affected versions are explicitly listed, primarily various builds of Netatalk 2.2.2 through 2.2.6 on Ubuntu platforms. No patch or remediation information is provided, so the patch status is not confirmed.