This Red Hat security advisory addresses multiple vulnerabilities in the nodejs24 package for Red Hat Enterprise Linux 10. The issues include several denial of service (DoS) vulnerabilities in the brace-expansion and undici libraries, TLS certificate validation bypasses, cache poisoning, and DNS hostname truncation bugs. These vulnerabilities could allow attackers to cause service disruptions, bypass TLS certificate hostname verification, or disclose information. The advisory provides an updated nodejs24 package rebased to the latest Node.js 24 release that fixes these issues.
A path traversal vulnerability exists in OtterMind Chat2DB up to version 5.3.8, specifically in the DbMybatisGenerateServiceImpl.generateClass function. This flaw allows remote attackers to manipulate the tableName argument to perform unauthorized path traversal. Public exploit code is available, and the vendor has not responded to disclosure attempts. The vulnerability has a high severity rating with a CVSS score of 7.3.
A security vulnerability in kekingcn kkFileView up to version 5.0.3 allows remote attackers to perform an open redirect via manipulation of the X-Base-Url HTTP header in the BaseUrlFilter.getBaseUrl function. The vulnerability has a medium severity with a CVSS score of 4.3. Public exploit code has been disclosed, but no official vendor response or patch is currently available.
A server-side request forgery (SSRF) vulnerability exists in DataLinkDC Dinky up to version 1.2.5 in the SqlGateway.onOpen function. This vulnerability allows remote attackers to manipulate the connectAddress argument, potentially causing the server to make unauthorized requests. The vulnerability has been publicly disclosed with exploit details available. The CVSS score is 7.3, indicating a high severity risk.
A critical heap-based buffer overflow vulnerability exists in the GetCAPTCHAsetting function of the HNAP Handler component in D-Link DIR-878 firmware version 1.20B05. This vulnerability can be exploited remotely by manipulating the uid argument. The affected product is no longer supported by the vendor. Public exploit code is available, increasing the risk of exploitation.
JeecgBoot version 3.9.5 contains a SQL injection vulnerability in the JimuBI component, specifically in the /jeecg-boot/drag/onlDragDatasetHead/getAllChartData endpoint. This flaw allows remote attackers to manipulate the 'params' argument to execute SQL injection attacks. Public exploit code is available, and the vendor has not responded to disclosure attempts. The vulnerability has a high severity rating with a CVSS score of 7.3.
OpenAM Consortium Edition versions 14.0.5 and earlier contain an open redirect vulnerability in the Liberty ID-FF service provider single sign-on flow. The vulnerability arises because the 'goto' parameter in the /preLogin endpoint is stored as the RelayState without validation, allowing redirection to arbitrary websites after authentication. This can be exploited by remote unauthenticated attackers to redirect users to malicious sites, potentially facilitating phishing attacks. Only deployments with Liberty ID-FF configured are affected; it is not enabled by default. The issue is fixed in version 14.0.6, which disables the legacy Liberty ID-FF endpoints.
JeecgBoot version 3.9.5 contains a SQL injection vulnerability in the Table Dictionary API, specifically in the JimuFormApiService.getTableDictList function. This flaw allows remote attackers with low privileges to manipulate the searchSql argument, potentially leading to unauthorized data access or modification. Public exploit code is available, but no official vendor response or patch has been provided.
An Incorrect Privilege Assignment vulnerability exists in DynamiApps Frontend Admin (acf-frontend-form-element) up to version 3.30.1. This flaw allows an attacker to escalate privileges, potentially gaining unauthorized high-level access. The vulnerability is rated critical with a CVSS score of 9.1, indicating it is remotely exploitable without user interaction and can lead to complete confidentiality and integrity compromise.
A cross-site scripting (XSS) vulnerability exists in Dianping CAT versions 3.0.0, 3.1.0, and 4.0-RC1. The flaw is in the Model.getDomain function within the Report Handler component, specifically in the WEB-INF/tags/hourlyReport.tag file. Remote attackers can exploit this vulnerability by manipulating the 'domain' argument. Public exploit code has been disclosed, but the vendor has not responded or provided a fix.
An open redirect vulnerability exists in Dianping CAT versions 3.0.0, 3.1.0, and 4.0-RC1 in the Handler.redirect function of Handler.java within the Login/Logout component. Manipulating the rtnUrl argument can redirect users to arbitrary URLs. The vulnerability can be exploited remotely and exploit code has been published. The vendor has not responded to disclosure attempts.
A server-side request forgery (SSRF) vulnerability exists in conductor-oss conductor affecting versions up to 3.32.4, 3.33.0, 3.34.0-rc3, and 4.0.0-alpha.1. The flaw is in the WorkflowSystemTask.start function within the PlannerContextFetchTask.java file. This vulnerability allows remote attackers to manipulate the 'url' argument, potentially causing the server to make unintended requests. Public exploit code is available, but no confirmed exploitation in the wild has been reported. The vulnerability has a medium severity rating with a CVSS score of 5.3. No patch or official fix information is provided in the data.
A SQL injection vulnerability exists in the ReportService.queryBiData function of erupts erupt versions up to 2.3.0. This vulnerability allows remote attackers with low privileges to manipulate the 'sort' argument to execute unauthorized SQL commands. The issue is fixed in version 2.4.0. Exploit code is publicly available, and the vulnerability has a medium severity rating.
A path traversal vulnerability exists in floci-io Floci versions up to 2.1.0 in the S3Destination.bucketName function of the S3 Destination Configuration Handler component. This vulnerability allows remote attackers to manipulate the BucketARN argument, potentially leading to unauthorized access or modification of files. The issue is fixed in version 2.2.0. Public exploit code is available, but there are no confirmed reports of exploitation in the wild.
CVE-2026-124508 is a medium severity vulnerability in floci-io Floci up to version 2.4.0. It affects the BuildspecParser.parseArtifacts function in the Artifact Handler component, allowing remote attackers to perform path traversal via manipulation of the buildspecOverride.artifacts.base-directory argument. The vulnerability has been publicly disclosed with exploit details available, but the vendor has not responded or provided a fix.
A vulnerability was identified in D-Link DIR-878 1.20B05. Affected is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument ConfigDNS/Primary/ConfigDNS/Secondary leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2026-124561 is a high-severity stack-based buffer overflow vulnerability in the D-Link DIR-878 router, specifically version 1.20B05. The flaw exists in the SetVLANSettings function within the prog.cgi file of the HNAP Handler component. An attacker can remotely exploit this vulnerability by manipulating the VID argument, potentially leading to a stack-based buffer overflow. The product affected is no longer supported by the vendor. Public exploit code has been disclosed, but no known active exploitation in the wild is reported.
A security vulnerability (CVE-2026-13732) in the GNU Debugger (GDB) affects Red Hat Enterprise Linux 9.6 Extended Update Support. The flaw is an out-of-bounds write in the STABS parser function read_member_functions() triggered by crafted ELF files. Red Hat has issued an important security advisory and released updated packages to address this issue.
Two denial of service vulnerabilities have been identified in the Qt software toolkit's qt5-qtbase and qt6-qtbase packages. These issues involve uncontrolled recursion in XML serialization (CVE-2026-11573) and a denial of service vulnerability in XML parsing (CVE-2026-19248). Red Hat has issued security updates addressing these vulnerabilities in their Enterprise Linux 8.8 releases.