Skip to content
OpenAdvisories

Package · Wolfi

tileserver-gl-compat

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2025-13466

    body-parser vulnerable to denial of service when url encoding is used

    body-parser 2.2.0 is vulnerable to denial of service due to inefficient handling of URL-encoded bodies with very large numbers of parameters. An attacker can send payloads containing thousands of parameters within the default 100KB request size limit, causing…

    body-parser body-parser saf code-server Debian Ubuntu Wolfi npm
  • Medium 5.3
    CVE-2025-64718

    js-yaml has prototype pollution in merge (<<)

    js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution (`__proto__`). All users who parse untrusted yaml documen…

    nodeca js-yaml katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm