tileserver-gl-compat

3 results · Clear filters · Feed

• Critical 9.4
  CVE-2025-7783 Public exploit

  Usage of unsafe random function in form-data for choosing boundary

  Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js. This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.

  katib-suggestion-hyperopt katib-earlystopping katib-suggestion-pbt-enas katib-suggestion-skopt-enas Debian Ubuntu Azure Linux Wolfi npm
  Jul 18, 2025
• High 7.5
  CVE-2024-12905 Public exploit

  tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File

  An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized fi…

  sqlpad code-server tileserver-gl reaper Debian Ubuntu Azure Linux Wolfi npm
  Mar 27, 2025
• High 7.7
  CVE-2025-27152 Public exploit

  Possible SSRF and Credential Leakage via Absolute URL in axios Requests

  axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to axios. Even if ⁠baseURL is set, axios sends the request to the specified absolute URL, potentially causing SSRF…

  axios axios prism kubeflow-pipelines-apiserver Debian Ubuntu Wolfi npm
  Mar 7, 2025