Information Disclosure

Articles tagged Information Disclosure

• 
  Vulnerability

  nuxt-ollama Information Disclosure (CVE-2026-59158)

  A CWE-522 credential-exposure flaw in the nuxt-ollama npm package leaks a configured Ollama API key in plaintext to any unauthenticated visitor. Fixed in 1.3.1.

  nuxt-ollamaollamallm-infrastructure +2

  2026-09-16
• 
  Vulnerability

  2 h2oai h2o-3 CVEs (CVE-2026-8750)

  Two more h2o-3 vulnerabilities (CVE-2026-8750, CVE-2026-8752) expose server-side information and allow improper access control, both publicly disclosed after the vendor did not respond.

  h2o-3machine-learninginformation-disclosure +1

  2026-09-13
• 
  Vulnerability

  Kirby CMS Information Disclosure (CVE-2026-69127)

  CVE-2026-69127 lets Kirby CMS's REST API leak the full server filesystem path in unsanitized error messages, useful for guessing the content.salt secret, fixed in Kirby 4.9.5 and 5.5.2.

  kirbycmsphp +2

  2026-09-09
• 
  Vulnerability

  6 CVEs Across 6 Vendors (CVE-2026-86217)

  A roundup of six low-severity, unrelated vulnerabilities disclosed in September 2026: information disclosure and XSS in several small PHP student/hobby projects, an out-of-bounds read in Valkey requiring cluster-mode plus attacker file access, and a disputed SSRF report in OpenAgents.

  low-severityroundupvalkey +3

  2026-09-07