Known Vulnerabilities for @cap-js/db-service by @cap-jsdb-service
Listed below are 10 of the newest known vulnerabilities associated with "@cap-js/db-service" by "@cap-jsdb-service".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103680 json | A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function when generating numbered ... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103679 json | A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutr... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103678 json | A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompr... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103472 json | restbed through 5.0.0 accepts WebSocket frames with declared payload lengths up to 2^63 bytes and buffers the payload without... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-103396 json | bbs-go through 4.4.6 contains a permission bypass vulnerability in the AdminMiddleware authorization logic where the read-onl... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-103395 json | LightLLM through 1.2.0 visual_only deployments expose an unauthenticated RPyC service with allow_pickle enabled that deserial... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-103290 json | Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insuf... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103268 json | Ghost versions before 6.62.0 contain an authentication bypass vulnerability that allows suspended staff users to reactivate t... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103262 json | Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remot... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103241 json | A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/... | Not Provided | 2026-09-30 | 2026-09-30 |