Known Vulnerabilities for JSON API User by Parorrey
Listed below are 1 of the newest known vulnerabilities associated with "JSON API User" by "Parorrey".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-104906 json | MISP contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer. When displaying a remote TAXII object, t... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-104182 json | stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103292 json | Ghost versions from 0.5.3 through versions prior to 6.50.0 fail to sanitize the data placed in the JSON-LD HTML tag emitted b... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-101169 json | In affected versions of Octopus Server, an authenticated user with permissions to edit an Environment or Project can set spec... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-100672 json | The Comments plugin (getgrav/grav-plugin-comments) for Grav CMS through version 1.2.10 registers an admin handler that return... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100669 json | Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In we... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-96256 json | The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored ... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-93901 json | The Optima Express IDX plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 8.7.5... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-93839 json | LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoint that allows una... | Not Provided | 2026-09-18 | 2026-09-22 |
| CVE-2026-93432 json | A flaw was found in the Quarkus Qute template engine. When the {#eval} section helper processes a sub-template, it fails to p... | Not Provided | 2026-09-18 | 2026-09-18 |