Vulnerabilities
Last updated 3 hours ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
content
|
@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service | High Risk 7.5 | 7 hours ago | 7 hours ago |
|
@hapi/content
|
@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service | High Risk 7.5 | 7 hours ago | 7 hours ago |
|
@sxm-content-creators/tools-ds
|
Malicious code in @sxm-content-creators/tools-ds (npm) | Unknown | 12 hours ago | 12 hours ago |
|
buttoncontent
|
Malicious code in buttoncontent (npm) | Unknown | 3 days ago | 1 day ago |
drupal/single_content_sync
|
No summary available | Unknown | 2 days ago | 2 days ago |
|
drupal/cms_content_sync
|
No summary available | Unknown | 2 days ago | 2 days ago |
|
drupal/single_content_sync
|
No summary available | Unknown | 2 days ago | 2 days ago |
|
@hapi/content
|
@hapi/content: Regular Expression Denial of Service (ReDoS) in HTTP header parsing | High Risk 7.5 | 7 months ago | 7 days ago |
plone-app-contenttypes
|
plone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
drupal/smart_content
|
No summary available | Unknown | 1 month ago | 1 month ago |
|
plone-app-contenttypes
|
Plone Unauthenticated Write Vulnerability | Critical 9.8 | 4 months ago | 1 month ago |
|
@hapi/content
|
@hapi/content header parser has a parameter smuggling issue that allows upload-filter bypass via duplicate parameters | High Risk 8.0 | 5 months ago | 1 month ago |
|
@strapi/plugin-content-manager
|
@strapi/plugin-content-manager leaks data via relations via the Admin Panel | Low Risk 2.3 | 2 years ago | 1 month ago |
|
@strapi/plugin-content-manager
|
Strapi may leak sensitive user information, user reset password, tokens via content-manager views | Medium Risk 5.8 | 3 years ago | 1 month ago |
|
@strapi/plugin-content-manager
|
Strapi's field level permissions not being respected in relationship title | Medium Risk 6.8 | 3 years ago | 1 month ago |
|
plone-app-contenttypes
|
Plone Unauthenticated Write Vulnerability | Critical 9.8 | 4 years ago | 1 month ago |
|
products-atcontenttypes
|
Cross-site Scripting and Open Redirect in Products.ATContentTypes | Medium Risk 4.3 | 4 years ago | 1 month ago |
|
drupal/single_content_sync
|
No summary available | Unknown | 1 year ago | 1 month ago |
|
drupal/content_moderation_notifications
|
No summary available | Unknown | 3 years ago | 1 month ago |
|
drupal/content_entity_clone
|
No summary available | Unknown | 2 years ago | 1 month ago |
|
drupal/block_content_revision_ui
|
No summary available | Unknown | 5 years ago | 1 month ago |
|
drupal/block_content_revision_ui
|
No summary available | Unknown | 5 years ago | 1 month ago |
|
drupal/private_content
|
No summary available | Unknown | 2 years ago | 1 month ago |
|
drupal/acquia_contenthub
|
No summary available | Unknown | 10 months ago | 1 month ago |
|
content-publisher-sdks
|
Malicious code in content-publisher-sdks (npm) | Unknown | 2 months ago | 1 month ago |
|
confluence-create-content
|
Malicious code in confluence-create-content (npm) | Unknown | 2 months ago | 2 months ago |
|
drupal/content_moderation_notifications
|
No summary available | Unknown | 2 months ago | 2 months ago |
|
@contentful/mcp-server
|
Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint | High Risk 7.7 | 2 months ago | 2 months ago |
|
@contentful/mcp-tools
|
Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint | High Risk 7.7 | 2 months ago | 2 months ago |
|
dolyame-ui-contenteditable
|
Malicious code in dolyame-ui-contenteditable (npm) | Unknown | 2 months ago | 2 months ago |
|
content-common
|
Malicious code in content-common (npm) | Unknown | 2 months ago | 2 months ago |
|
boxy-docusaurus-plugin-content-docs-light
|
Malicious code in boxy-docusaurus-plugin-content-docs-light (npm) | Unknown | 2 months ago | 2 months ago |
|
@or-sdk/content-request
|
Malicious code in @or-sdk/content-request (npm) | Unknown | 2 months ago | 2 months ago |
|
@onereach/or-content-builder-renderer
|
Malicious code in @onereach/or-content-builder-renderer (npm) | Unknown | 2 months ago | 2 months ago |
|
@onereach/content-builder
|
Malicious code in @onereach/content-builder (npm) | Unknown | 2 months ago | 2 months ago |
|
@onereach/content-builder-template-compiler
|
Malicious code in @onereach/content-builder-template-compiler (npm) | Unknown | 2 months ago | 2 months ago |
|
@servicetitan/contentful
|
Malicious code in @servicetitan/contentful (npm) | Unknown | 2 months ago | 2 months ago |
|
@servicetitan/contentful-proxy
|
Malicious code in @servicetitan/contentful-proxy (npm) | Unknown | 2 months ago | 2 months ago |
|
@contentprod-authoring/block-manager
|
Malicious code in @contentprod-authoring/block-manager (npm) | Unknown | 4 months ago | 3 months ago |
|
@content-editor/common
|
Malicious code in @content-editor/common (npm) | Unknown | 4 months ago | 3 months ago |
|
@contenteditor-shared/content-editor-common
|
Malicious code in @contenteditor-shared/content-editor-common (npm) | Unknown | 4 months ago | 3 months ago |
|
getd-content-management
|
Malicious code in getd-content-management (npm) | Unknown | 4 months ago | 3 months ago |
|
@ethlete/contentful
|
Malicious code in @ethlete/contentful (npm) | Unknown | 4 months ago | 3 months ago |
|
contentful
|
Cross-site scripting in Contentful | Medium Risk 6.1 | 5 years ago | 3 months ago |
|
contentful
|
Cross-site scripting in Contentful | Medium Risk 6.1 | 4 months ago | 3 months ago |
|
macos-contentprovider-optimizingassets
|
Malicious code in macos-contentprovider-optimizingassets (npm) | Unknown | 4 months ago | 4 months ago |
|
collective-dms-basecontent
|
No summary available | Unknown | 3 years ago | 4 months ago |
|
@databus-service-ui/scroll-up-content
|
Malicious code in @databus-service-ui/scroll-up-content (npm) | Unknown | 5 months ago | 5 months ago |
|
claude-content-writer
|
Malicious code in claude-content-writer (npm) | Unknown | 5 months ago | 5 months ago |
|
@strapi/content-type-builder
|
Strapi Vulnerable to SQL Injection in Content Type Builder | Critical 9.5 | 5 months ago | 5 months ago |
Page 1