Package · Wolfi

tileserver-gl

84 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.2

CVE-2026-106445 Public exploit

Handlebars: JavaScript Injection via Own Property Check Bypass

Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before applying the prototype-access deny list because constructor is an own property of F…

handlebars-lang handlebars.js renovate prism Debian Ubuntu Wolfi npm

Oct 6, 2026
Critical 9.4

CVE-2025-7783 Public exploit

Usage of unsafe random function in form-data for choosing boundary

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js. This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.

katib-suggestion-hyperopt katib-earlystopping katib-suggestion-hyperband katib-suggestion-optuna-enas Debian Ubuntu Azure Linux Wolfi npm

Jul 18, 2025