📦 Homarr

This vulnerability in Homarr allows privilege escalation and unauthorized access to other users' groups through crafted LDAP search queries due to insufficient input sanitization. It affects all Homar...

This CVE describes a supply chain compromise where malicious versions of eslint-config-prettier contain embedded malware. Installing affected package versions triggers execution of node-gyp.dll malwar...

This vulnerability in Homarr dashboard allows unauthenticated attackers to trigger server-side requests to arbitrary URLs via a public tRPC endpoint. This enables SSRF attacks and port scanning from t...