TI-2026-28305 CVE-2026-39315 · GHSA-95h2-gj7x-gx9w
Unhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe()
Priority MEDIUM 60
Unhead is a document head and template manager.
Vulnerabilities
6 records
TI-2026-27362 CVE-2026-35209 · GHSA-737v-mqg7-c878
defu: Prototype pollution via `__proto__` key in defaults argument
Priority LOW 39
defu is software that allows uers to assign default properties recursively.
TI-2026-24425 CVE-2026-31873 · GHSA-5339-hvwr-7582
Unhead has a Bypass of URI Scheme Sanitization in makeTagSafe via Case-Sensitivity
Priority HIGH 66
Unhead is a document head and template manager.
TI-2026-24412 CVE-2026-31860 · GHSA-g5xx-pwrp-g3fv
Unhead has a XSS bypass in `useHeadSafe` via attribute name injection and case-sensitive protocol check
Priority MEDIUM 57
Unhead is a document head and template manager.
TI-2025-42947 CVE-2025-69874 · GHSA-92fh-27vv-894w
nanotar through 0.2.0 has a path traversal vulnerability in parseTar() and parseTarGzip()…
Priority HIGH 81
nanotar through 0.2.0 has a path traversal vulnerability in parseTar() and parseTarGzip() that allows remote attackers to write arbitrary files outside the intended extraction directory via a crafted tar archive containi…
TI-2025-34195 CVE-2025-54387 · GHSA-mm3p-j368-7jcr
IPX is Vulnerable to Path Traversal via Prefix Matching Bypass
Priority HIGH 70
IPX is an image optimizer powered by sharp and svgo.