📦 Konga

This vulnerability allows attackers to bypass authentication in Konga v0.14.9 by crafting malicious JWT tokens. Attackers can gain unauthorized administrative access to the Konga management interface....

Konga v0.14.9 is vulnerable to Cross-Site Scripting (XSS) via the username parameter, allowing attackers to inject malicious scripts that execute in users' browsers. This affects administrators and us...