Skip to content
Threat Feed
Subscribe

Tag

Framework

4 briefs RSS
high advisory

Electron WebView Node.js Integration Bypass

A vulnerability in the Electron framework allows a <webview> tag to enable Node.js integration within Web Workers regardless of the embedder's restricted settings, potentially leading to unauthorized code execution.

Electron +3 vulnerability code-execution framework
2t 1c
high advisory

Multiple Vulnerabilities in Angular Framework

Multiple vulnerabilities in the Angular framework allow remote, anonymous attackers to perform cross-site scripting (XSS), bypass security controls, and manipulate or disclose sensitive data.

Angular web-security framework vulnerability
1t 3c
critical threat

Unauthenticated SSRF and Secret Exfiltration in Flyto Core

An unauthenticated SSRF vulnerability in the Flyto Core /run endpoint allows attackers to exfiltrate the internal FLYTO_RUNNER_SECRET and perform unauthorized requests against internal infrastructure.

Flyto Core ssrf credential-theft vulnerability cve-2026-67426 path-traversal arbitrary-file-write rce framework
1r 4t 1c
medium advisory

Multiple Netty Vulnerabilities Enable Denial of Service Attacks

Multiple vulnerabilities in Netty can be exploited by an attacker to conduct Denial of Service (DoS) attacks, impacting the availability of services utilizing the Netty framework.

Netty denial-of-service vulnerability framework
1t