Aikido Intel

happy-dom is vulnerable to Remote Code Execution (RCE) in versions 13.0.0 - 15.10.0.

fluent.fluent-bit is vulnerable to Improper Authentication in versions 3.0.0 - 3.1.9.

express-zod-api is vulnerable to Generation of Error Message Containing Sensitive Information in versions 1.0.0 - 20.17.0.

chriskohlhoff.asio is vulnerable to Missing Standardized Error Handling Mechanism in versions 1.0.0 - 1.12.2.

fastapi-sso is vulnerable to Improper Authentication in versions 0.2.3 - 0.15.0.

rspec-its is vulnerable to Access to Critical Private Variable via Public Method in versions 1.0.0 - 1.3.1.

mpg123 is vulnerable to Out-of-bounds Write in versions 0.61 - 1.32.7.

mysql-connector-python is vulnerable to SQL Injection in versions 8.0.4 - 8.0.10.

urllib3-future is vulnerable to Inadequate Encryption Strength in versions 2.0.931 - 2.11.907.

h2o is vulnerable to Uncontrolled Resource Consumption in versions 3.10.0.3 - 3.46.0.5.

h2o is vulnerable to Deserialization of Untrusted Data in versions 3.10.0.3 - 3.46.0.5.

nope-validator is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 0.2.0 - 0.11.3.

express is vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in versions 3.0.0-alpha1 - 3.21.2.

Elsa is vulnerable to Improper Authorization in versions 1.0.0 - 3.2.2.

Werkzeug is vulnerable to Inadequate Encryption Strength in versions 0.13 - 3.0.6.

uppy is vulnerable to Overly Permissive Cross-domain Whitelist in versions 3.5.0 - 4.5.0.

github.com/hashicorp/consul is vulnerable to Path Traversal in versions 0.1.0 - 1.20.0.

prefect is vulnerable to Server-side Request Forgery (SSRF) in versions 2.8.0 - 2.20.10 and 3.0.0 - 3.0.1.