All disclosed vulnerabilities by Snyk

• • M
  Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in crow (conan)

  Discovered by Alessio Della Libera - Snyk Research Team
  8 May 2025
• • M
  Content Injection in crow (conan)

  Discovered by Snyk Security Team
  8 May 2025
• • M
  Path Traversal in crow (conan)

  Discovered by Snyk Security Team
  8 May 2025
• • H
  CRLF Injection in cpp-httplib (conan)

  Discovered by Alessio Della Libera
  8 May 2025
• • M
  Cross-site Scripting (XSS) in jquery-validation (npm)

  Discovered by Volkan Ceylan
  14 Apr 2025
• • M
  Prototype Pollution in expand-object (npm)

  Discovered by Miguel Monteiro
  3 Apr 2025
• • H
  Buffer Overflow in bigint-buffer (npm)

  Discovered by Cris Staicu
  3 Apr 2025
• • H
  Server-side Request Forgery (SSRF) in spatie/browsershot (composer)

  Discovered by Ngan Jun Ming
  3 Apr 2025
• • M
  Cross-site Scripting (XSS) in react-draft-wysiwyg (npm)

  Discovered by Thai Do Nhat
  3 Apr 2025
• • H
  Server-Side Request Forgery (SSRF) in nossrf (npm)

  Discovered by Liran Tal
  23 Mar 2025