Known Vulnerabilities for Vue-start-server by @tanstack
Listed below are 10 of the newest known vulnerabilities associated with "Vue-start-server" by "@tanstack".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-58469 json | GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string... | Not Provided | 2026-07-07 | 2026-07-08 |
| CVE-2026-58371 json | SeaweedFS before 4.30 reflects the callback query parameter verbatim into responses served with Content-Type application/java... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-56231 json | Capgo before 12.128.2 contains a broken object level authorization (BOLA) vulnerability in the POST /build/start/:jobId and P... | Not Provided | 2026-06-24 | 2026-06-25 |
| CVE-2026-55994 json | Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF) vul... | Not Provided | 2026-07-06 | 2026-07-06 |
| CVE-2026-55993 json | Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery (SSRF) vul... | Not Provided | 2026-07-06 | 2026-07-07 |
| CVE-2026-55205 json | Hermes WebUI before 0.51.468 contains a resource exhaustion vulnerability in the unauthenticated POST /api/onboarding/oauth/s... | Not Provided | 2026-06-18 | 2026-06-18 |
| CVE-2026-54695 json | Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. Prior to 1.4.0,... | Not Provided | 2026-07-09 | 2026-07-10 |
| CVE-2026-54009 json | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, POST /api/... | Not Provided | 2026-06-23 | 2026-06-24 |
| CVE-2026-48205 json | Improper Input Validation, Server-Side Request Forgery (SSRF) vulnerability in Apache Camel DNS component. The camel-dns pro... | Not Provided | 2026-07-06 | 2026-07-06 |
| CVE-2026-48203 json | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Improper Input Validation... | Not Provided | 2026-07-06 | 2026-07-06 |