Known Vulnerabilities for Public.js by Public.js Project
Listed below are 2 of the newest known vulnerabilities associated with "Public.js" by "Public.js Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65595 json | n8n before 2.30.1 and 2.29.8 assigns all Public API key scopes to JWTs issued through the Token Exchange module regardless of... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-65048 json | Ninja Forms plugin for WordPress versions 3.10.4 through 3.14.9 contains an unauthenticated stored cross-site scripting vulne... | Not Provided | 2026-07-21 | 2026-07-21 |
| CVE-2026-64792 json | Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest.... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-64627 json | Parse Server versions >= 9.0.0 before 9.10.0-alpha.4 and versions before 8.6.85 contain a schema disclosure vulnerability. Wh... | Not Provided | 2026-07-21 | 2026-07-21 |
| CVE-2026-64620 json | FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer overflow in crypto_rsa_common() (libfreerdp/crypto/cry... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-63429 json | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `POST /api/upload` has no authentication guard, no globa... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-63100 json | Maybe through 0.6.0 contains a missing authorization vulnerability that allows authenticated low-privilege member-role users ... | Not Provided | 2026-07-17 | 2026-07-21 |
| CVE-2026-63087 json | Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a vali... | Not Provided | 2026-07-16 | 2026-07-17 |
| CVE-2026-62683 json | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified... | Not Provided | 2026-07-15 | 2026-07-15 |
| CVE-2026-62482 json | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). Su... | Not Provided | 2026-07-21 | 2026-07-22 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Public.js Project | Public.js | 0.1.4 | |||
| Application | Public.js Project | Public.js | 0.1.3 | |||
| Application | Public.js Project | Public.js | 0.1.2 | |||
| Application | Public.js Project | Public.js | 0.1.1 | |||
| Application | Public.js Project | Public.js | 0.1.0 |