Py0zz1 W0r1d Py0zz1 W0r1d

https://github.com/esm-dev/esm.sh/security/advisories/GHSA-h3mw-4f23-gwpw Arbitrary file write via tarslip### Summary The esm.sh CDN service is vulnerable to a Path Traversal (CWE-22) vulnerability during NPM package tarball extraction. An attacker can craft a malicious NPM package containing speci...github.com

https://github.com/esm-dev/esm.sh/security/advisories/GHSA-hcpf-qv9m-vfgp JS Template Literal Injection in CSS-to-JavaScript### Summary The esm.sh CDN service contains a Template Literal Injection vulnerability (CWE-94) in its CSS-to-JavaScript module conversion feature. When a CSS file is requested with the `?modu...github.com

SummaryCommand Injection vulnerability occurs in pgAdmin4 running on Windows environment due to the use of shell=True parameter in subprocess.Popen() when executing backup/restore processes. Attackers can execute arbitrary system commands through file path input.DetailsReproduce step:1.Login to pgAdmin4 on Windows environment2.Connect to a database server3.Select Restore function4.Send the follo..

https://github.com/langfuse/langfuse GitHub - langfuse/langfuse: 🪢 Open source LLM engineering platform: LLM Observability, metrics, evals, prompt management, pla🪢 Open source LLM engineering platform: LLM Observability, metrics, evals, prompt management, playground, datasets. Integrates with OpenTelemetry, Langchain, OpenAI SDK, LiteLLM, and more. 🍊YC W23 ...github.comPatchedhttps://github.c..