Known Vulnerabilities for History by @tanstack
Listed below are 10 of the newest known vulnerabilities associated with "History" by "@tanstack".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-59262 json | AFFiNE's histories GraphQL field fails to validate Doc.Read permission before exposing document edit history, allowing authen... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-58656 json | Grav API plugin before v1.0.0-rc.16 accepts JWT tokens via the ?token= URL query parameter and responds with Access-Control-A... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-57955 json | SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary ClickH... | Not Provided | 2026-06-29 | 2026-06-29 |
| CVE-2026-57287 json | Jenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact the encrypted values of secrets whe... | Not Provided | 2026-06-24 | 2026-06-24 |
| CVE-2026-56425 json | The Azure Active Directory (AAD) authentication implementation contained multiple weaknesses in its OAuth 2.0 authorization f... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-56293 json | Capgo before 12.128.2 contains an authorization flaw in transfer_app() that fails to update deploy_history.owner_org when tra... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-56224 json | Capgo console.capgo.app/login before 12.128.2 accepts access_token and refresh_token in URL query parameters, automatically a... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-56077 json | PraisonAI before 1.5.115 contains an information disclosure vulnerability in the MultiAgentLedger component that allows attac... | Not Provided | 2026-06-18 | 2026-06-23 |
| CVE-2026-55583 json | Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.9.0, Twenty was vulnerable to a cross-wo... | Not Provided | 2026-06-24 | 2026-06-25 |
| CVE-2026-54527 json | JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader() method pas... | Not Provided | 2026-07-08 | 2026-07-09 |