Issues

• [Security] [Dependabot] esbuild: Missing binary integrity verification in Deno module enables remote code execution via NPM_CONFIG_REGISTRY

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#701 · Filter by author ghost opened on Jun 13, 2026
  1

• [Security] [Dependabot] esbuild: Missing binary integrity verification in Deno module enables remote code execution via NPM_CONFIG_REGISTRY

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#702 · Filter by author ghost opened on Jun 13, 2026
  1

• [Security] [Dependabot] Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#700 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#699 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] Forge has signature forgery in Ed25519 due to missing S > L check

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#698 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] Forge has signature forgery in Ed25519 due to missing S > L check

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#697 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#696 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#695 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#694 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)

  security:finding
  ianlintner/Example-React-AI-Chat-App#693 · Filter by author ghost opened on Jun 11, 2026

• [Security] [Dependabot] Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#692 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options

  security:finding
  ianlintner/Example-React-AI-Chat-App#691 · Filter by author ghost opened on Jun 11, 2026

• [Security] [Dependabot] Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#690 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] ws: Uninitialized memory disclosure

  security:finding
  ianlintner/Example-React-AI-Chat-App#689 · Filter by author ghost opened on Jun 11, 2026

• [Security] [Dependabot] path-to-regexp vulnerable to Denial of Service via sequential optional groups

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#688 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] Mongoose's Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#687 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#686 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#685 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] Picomatch has a ReDoS vulnerability via extglob quantifiers

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#683 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] Picomatch has a ReDoS vulnerability via extglob quantifiers

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#684 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] lodash vulnerable to Code Injection via _.template imports key names

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#682 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] React Server Components have a Denial of Service Vulnerability

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#681 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

  maintainer:escalatedsecurity:finding
  ianlintner/Example-React-AI-Chat-App#680 · Filter by author ghost opened on Jun 11, 2026
  1

• [Security] [Dependabot] basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

  security:finding
  ianlintner/Example-React-AI-Chat-App#679 · Filter by author ghost opened on Jun 11, 2026

• [Security] [Dependabot] xmldom has XML node injection through unvalidated processing instruction serialization

  security:finding
  ianlintner/Example-React-AI-Chat-App#678 · Filter by author ghost opened on Jun 11, 2026