Aikido Vulnerability Database

go.opentelemetry.io/collector/internal/globalgates is vulnerable to Undefined Behavior in versions 0.2.0 - 0.110.0 and 1.0.0 - 1.16.0.

go.opentelemetry.io/collector/config/confignet is vulnerable to Undefined Behavior in versions 0.2.0 - 0.110.0 and 1.0.0 - 1.16.0.

imap-tools is vulnerable to Improper Input Validation in versions 0.9.0 - 1.7.2.

@kinde-oss/kinde-auth-nextjs is vulnerable to Storage of Sensitive Information in a Cookie in versions 1.8.19 - 1.10.1 and 2.0.0 - 2.3.8.

prism is vulnerable to Improper Input Validation in versions 0.7.0 - 1.0.0.

chainlit is vulnerable to Improper Authentication in versions 0.7.0 - 1.2.0.

@vendure/ui-devkit is vulnerable to Exposure of Sensitive Information in versions 1.0.0 - 3.0.1.

@grafana/ui is vulnerable to Improper Authorization in versions 8.0.0 - 10.3.9, 10.4.0 - 10.4.8, 11.0.0 - 11.0.4 and 11.1.0 - 11.1.5.

@grafana/data is vulnerable to Improper Authorization in versions 8.0.0 - 10.3.9, 10.4.0 - 10.4.8, 11.0.0 - 11.0.4 and 11.1.0 - 11.1.5.

@grafana/runtime is vulnerable to Improper Authorization in versions 8.0.0 - 10.3.9, 10.4.0 - 10.4.8, 11.0.0 - 11.0.4 and 11.1.0 - 11.1.5.

statamic/cms is vulnerable to Cross-site Scripting (XSS) in versions 3.0.0 - 4.58.2 and 5.0.0 - 5.22.0.

zenstack is vulnerable to Improper Authorization in versions 2.0.0 - 2.4.1.

dart_jsonwebtoken is vulnerable to Insufficient Verification of Data Authenticity in versions 0.1.0 - 2.14.0.

laravel/octane is vulnerable to DoS in versions 0.1.0 - 2.5.5.

@trojs/openapi-server is vulnerable to DoS in versions 0.1.0 - 1.2.5 and 2.0.0 - 2.0.1.

kevinpapst/tabler-bundle is vulnerable to Cross-Site Request Forgery (CSRF) in versions 0.1 - 1.5.1.

fastify-type-provider-zod is vulnerable to Generation of Error Message Containing Sensitive Information in versions 3.0.0 - 4.0.0.

@scalar/api-client is vulnerable to Cross-site Scripting (XSS) in versions 0.1.1 - 2.1.9.