The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,288
Mitigations18,329
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@sveltejs/kit< 3.0.0
npm: SvelteKit: URL redirection to untrusted site via enhanced form submission
4.7
27 minutes ago
odf-kit>= 0.9.8, < 0.14.2
npm: odf-kit has HTML injection leading to XSS in odsToHtml() via unescaped style attribute values
6.1
30 minutes ago
electron< 42.11.16
npm: Electron: Mitigation for compromised eMudhra intermediate certificates
7.4
32 minutes ago
body-parser< 1.20.9
npm: body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body
7.5
32 minutes ago
@strands-agents/sdk< 1.5.0
npm: Strands Agents SDK: Exposure of data element to wrong session in the A2A Server
8.1
37 minutes ago
@sveltejs/kit< 3.0.0
npm: SvelteKit : XSS via untrusted cache-control header in prerendered page
2.3
42 minutes ago
obsidian-tc>= 1.0.1, <= 1.31.3
npm: obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes
7.1
2 hours ago
obsidian-tc< 1.3.1
npm: obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling drive-by vault access on loopback
9.6
2 hours ago
obsidian-tc< 1.3.1
npm: obsidian-tc Bridge tools leak denied-note data via unfiltered sibling fields
4.3
2 hours ago
obsidian-tc>= 1.13.0, <= 1.31.3
npm: obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP
7.1
3 hours ago
obsidian-tc< 1.3.1
npm: obsidian-tc tokens can access arbitrary configured vaults
9.9
3 hours ago
obsidian-tc< 1.3.1
npm: obsidian-tc: Default folder ACL is fail-open; .obsidian plugin secrets are readable by default
6.5
3 hours ago
obsidian-tc< 1.3.1
npm: obsidian-tc : Symlink read-ACL scope bypass via lexical path checks
4.7
3 hours ago
Depicter Slider4.0.5-4.8.1
Editor+ Arbitrary File Upload vulnerability
9.1
12 hours ago
Otter - Gutenberg Block< 3.2.8
Unauthenticated Stored XSS vulnerability
7.1
12 hours ago
Spam protection, AntiSpam, FireWall by CleanTalk<= 6.89.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
13 hours ago
WebP Express< 0.25.16
Unauthenticated Stored XSS vulnerability
7.1
13 hours ago
Royal MCP< 1.5.7
Authentication Bypass vulnerability
7.5
13 hours ago
LiteSpeed Cache< 7.9.2
Unauthenticated Stored XSS vulnerability
7.5
13 hours ago
LiteSpeed Cache< 7.9.2
Unauthenticated Stored XSS vulnerability
7.5
14 hours ago