Known Vulnerabilities for Path-parse by Path-parse Project
Listed below are 1 of the newest known vulnerabilities associated with "Path-parse" by "Path-parse Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-125704 json | A use-after-free flaw was found in GStreamer core buffer value deserialization. When serialized buffer text contains an inval... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-124457 json | OpenEMR before 8.3.0 contains a path traversal vulnerability in interface/billing/sl_eob_process.php that allows authenticate... | Not Provided | 2026-11-08 | 2026-11-09 |
| CVE-2026-123824 json | The Symfony Config component XmlUtils::parse() enables DTD validation before rejecting documents that carry a doctype, allo... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-115700 json | Interpretation Conflict vulnerability in hackney_url in benoitc hackney allows Server Side Request Forgery via a percent-enco... | Not Provided | 2026-10-26 | 2026-11-02 |
| CVE-2026-114143 json | toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() repeatedly slices and rejoins every path... | Not Provided | 2026-10-21 | 2026-10-28 |
| CVE-2026-114142 json | toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() can write attacker-controlled properties... | Not Provided | 2026-10-21 | 2026-10-28 |
| CVE-2026-112947 json | Vite is a frontend tooling framework for JavaScript. From 8.2.0 until 8.2.4 and 8.3.3, the first 4 bytes of files outside of ... | Not Provided | 2026-10-20 | 2026-10-21 |
| CVE-2026-111816 json | Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Transfe... | Not Provided | 2026-10-21 | 2026-10-23 |
| CVE-2026-110910 json | ### Summary `qs.stringify` with `allowEmptyArrays: true` writes the key of an empty array without encoding it, even though... | Not Provided | 2026-10-27 | 2026-11-04 |
| CVE-2026-110816 json | ### Summary `qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value` when a... | Not Provided | 2026-10-14 | 2026-10-16 |