Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: web-infra-dev Clear all filters
TI-2026-08888 CVE-2026-10144 · GHSA-x8vr-98rv-c92v

Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling

Priority LOW 37

Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to the server.open configuration on macOS.

CVSS 4.0HIGH 7.1 Local No auth User interaction EPSS 0.0168 Published 2026-09-15 Fixed in 2.0.9 CWE-78
TI-2026-42625 CVE-2026-59804 · GHSA-8rcx-4rjr-4wpf

Midscene Bridge Server - Session Hijack via Unauthenticated WebSocket

Priority HIGH 68

Midscene Bridge Server through 1.10.3, fixed in commit 86f4118, contains a missing authentication and CORS misconfiguration vulnerability that allows unauthenticated remote attackers to hijack active bridge sessions by o…

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00308 Published 2026-07-08 Fixed CWE-1385