Known Vulnerabilities for Cors-proxy by Isomorphic-git
Listed below are 1 of the newest known vulnerabilities associated with "Cors-proxy" by "Isomorphic-git".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-100646 json | SiYuan is a self-hosted personal knowledge management system. In versions up to and including 3.8.3, the kernel's authenticat... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-91081 json | Docs through 5.6.1 contains a server-side request forgery vulnerability in the cors-proxy endpoint that allows anonymous atta... | Not Provided | 2026-09-14 | 2026-09-20 |
| CVE-2026-82438 json | Description Three separate mechanisms allowed a web page on an unrelated origin to read responses that Storm's HTTP componen... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-77581 json | BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, the certificate and timestamp CORS proxy i... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-77360 json | oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.8, the @or... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-61593 json | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to versi... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-59903 json | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handl... | Not Provided | 2026-08-17 | 2026-08-17 |
| CVE-2026-57449 json | Actual is a local-first personal finance tool. Prior to 26.7.0, Actual Sync Server's CORS proxy is intended to let authentica... | Not Provided | 2026-09-25 | 2026-09-28 |
| CVE-2026-55891 json | PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, Request::getRequestUri()... | Not Provided | 2026-08-28 | 2026-08-31 |
| CVE-2026-55438 json | Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.17, 2.32.7, 2.3... | Not Provided | 2026-07-08 | 2026-07-08 |