Known Vulnerabilities for Normalize-url by Normalize-url Project
Listed below are 1 of the newest known vulnerabilities associated with "Normalize-url" by "Normalize-url Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-76641 json | Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by proces... | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-73291 json | Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Prior to version 3.4.0, Seerr's Ima... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2026-73030 json | unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_directory function ... | Not Provided | 2026-08-10 | 2026-08-11 |
| CVE-2026-72533 json | An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Doc... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-69257 json | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise's HTTP secur... | Not Provided | 2026-08-04 | 2026-08-04 |
| CVE-2026-65900 json | DOMPurify versions >=3.0.0 and before 3.4.8, when configured with SAFE_FOR_TEMPLATES together with a DOM output mode (RETURN_... | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-65841 json | Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.13.6, Jodit's clean-html denyTags fi... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-65017 json | Apache Airflow's Config API did not mask team-scoped sensitive configuration values in multi-team deployments. When an admini... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2026-64402 json | In the Linux kernel, the following vulnerability has been resolved: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_... | Not Provided | 2026-07-25 | 2026-08-17 |
| CVE-2026-63303 json | A Path Traversal vulnerability exists in Quick.CMS through the URI path component of HTTP requests, where the server fails to... | Not Provided | 2026-07-28 | 2026-07-28 |