https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 03:50:02 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-90771 <p>joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts __proto__ as an error code. Attackers can supply __proto__ keys in custom messages to replace the returned object&#39;s prototype, breaking downstream code relying on Object.prototype methods.</p> <p>joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts __proto__ as an error code. Attackers can supply __proto__ keys in custom messages to replace the returned object&#39;s prototype, breaking downstream code relying on Object.prototype methods.</p> https://db.gcve.eu/vuln/fkie_cve-2026-90771 https://db.gcve.eu/vuln/ghsa-wr44-6hxh-3jwq <p>joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts __proto__ as an error code. Attackers can supply __proto__ keys in custom messages to replace the returned object&#39;s prototype, breaking downstream code relying on Object.prototype methods.</p> <p>joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts __proto__ as an error code. Attackers can supply __proto__ keys in custom messages to replace the returned object&#39;s prototype, breaking downstream code relying on Object.prototype methods.</p> https://db.gcve.eu/vuln/ghsa-wr44-6hxh-3jwq https://db.gcve.eu/vuln/rhsa-2026:67573 <p>grafana: Grafana: Arbitrary code execution and information disclosure via Cross-Site Scripting in geomap panel grafana: tempo: loki: Tempo and Loki Datasource Plugins: Information disclosure and unauthorized actions via path traversal dompurify: DOMPurify: Cross-Site Scripting via IN_PLACE sanitization joi: joi: Prototype Pollution via custom messages</p> <p>grafana: Grafana: Arbitrary code execution and information disclosure via Cross-Site Scripting in geomap panel grafana: tempo: loki: Tempo and Loki Datasource Plugins: Information disclosure and unauthorized actions via path traversal dompurify: DOMPurify: Cross-Site Scripting via IN_PLACE sanitization joi: joi: Prototype Pollution via custom messages</p> https://db.gcve.eu/vuln/rhsa-2026:67573