github.com/farion1231/cc-switch
Submitted 8/4/2026, 10:25:53 AM · Status: ok
Risk grade
F
100 / 100
Findings
1523
1 critical45 high131 medium15 low1331 info0 on CISA KEV0ATT&CK
Showing 1,523 of 1,523 findings
Findings
- When Vitest UI server is listening, arbitrary file can be read and executedgrypeCVE-2026-47429EPSS 1.0%
- Detected aws-access-token: Identified a pattern that may indicate AWS credentials, risking unauthorized cloud resource access and data breaches on AWS platformsIdentified a pattern that may indicate AWS credentials, risking unauthorized cloud resource access and data breaches on AWS platforms.gitleaks
- Detected generic-api-key: Detected a Generic API Key, potentially exposing access to various services and sensitive operationsDetected a Generic API Key, potentially exposing access to various services and sensitive operations.gitleaks
- Detected generic-api-key: Detected a Generic API Key, potentially exposing access to various services and sensitive operationsDetected a Generic API Key, potentially exposing access to various services and sensitive operations.gitleaks
- Detected generic-api-key: Detected a Generic API Key, potentially exposing access to various services and sensitive operationsDetected a Generic API Key, potentially exposing access to various services and sensitive operations.gitleaks
- Detected generic-api-key: Detected a Generic API Key, potentially exposing access to various services and sensitive operationsDetected a Generic API Key, potentially exposing access to various services and sensitive operations.gitleaks
- Detected generic-api-key: Detected a Generic API Key, potentially exposing access to various services and sensitive operationsDetected a Generic API Key, potentially exposing access to various services and sensitive operations.gitleaks
- Detected generic-api-key: Detected a Generic API Key, potentially exposing access to various services and sensitive operationsDetected a Generic API Key, potentially exposing access to various services and sensitive operations.gitleaks
- Detected generic-api-key: Detected a Generic API Key, potentially exposing access to various services and sensitive operationsDetected a Generic API Key, potentially exposing access to various services and sensitive operations.gitleaks
- Detected generic-api-key: Detected a Generic API Key, potentially exposing access to various services and sensitive operationsDetected a Generic API Key, potentially exposing access to various services and sensitive operations.gitleaks
- Detected generic-api-key: Detected a Generic API Key, potentially exposing access to various services and sensitive operationsDetected a Generic API Key, potentially exposing access to various services and sensitive operations.gitleaks
- AWS-LC has PKCS7_verify Certificate Chain Validation Bypassgrype
- AWS-LC has PKCS7_verify Signature Validation Bypassgrype
- AWS-LC has Timing Side-Channel in AES-CCM Tag Verificationgrype
- AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CNgrype
- CRL Distribution Point Scope Check Logic Error in AWS-LCgrype
- form-data: CRLF injection in form-data via unescaped multipart field names and filenamesgrypeCVE-2026-12143EPSS 0.5%
- Picomatch has a ReDoS vulnerability via extglob quantifiersgrypeCVE-2026-33671EPSS 0.4%
- Picomatch has a ReDoS vulnerability via extglob quantifiersgrypeCVE-2026-33671EPSS 0.4%
- PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS commentsgrypeCVE-2026-45623EPSS 0.5%
- PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosuregrype
- Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassemblygrype
- Rollup 4 has Arbitrary File Write via Path TraversalgrypeCVE-2026-27606EPSS 1.4%
- rust-openssl has incorrect bounds assertion in aes key wrapgrypeCVE-2026-41678EPSS 0.3%
- rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLsgrypeCVE-2026-42327EPSS 0.2%
- rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1grypeCVE-2026-41676EPSS 0.3%
- rust-openssl: rustMdCtxRef::digest_final() writes past caller buffer with no length checkgrypeCVE-2026-41681EPSS 0.4%
- rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peergrypeCVE-2026-41898EPSS 0.3%
- rustls-webpki: Denial of service via panic on malformed CRL BIT STRINGgrype
- Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocketgrypeCVE-2026-39363EPSS 3.3%
- vite: `server.fs.deny` bypass on Windows alternate pathsgrypeCVE-2026-53571EPSS 0.6%
- vite: `server.fs.deny` bypass on Windows alternate pathsgrypeCVE-2026-53571EPSS 0.6%
- Vite: `server.fs.deny` bypassed with queriesgrypeCVE-2026-39364EPSS 2.1%
- ws: Memory exhaustion DoS from tiny fragments and data chunksgrypeCVE-2026-48779EPSS 0.8%
- AWS-LC has PKCS7_verify Certificate Chain Validation Bypass### Summary AWS-LC is an open-source, general-purpose cryptographic library. ### Impact Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain verification when processing PKCS7 objects with multiple signers, except…trivy
- AWS-LC has PKCS7_verify Signature Validation Bypass### Summary AWS-LC is an open-source, general-purpose cryptographic library. ### Impact Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature verification when processing PKCS7 objects with Authenticated Attributes. Custome…trivy
- AWS-LC has Timing Side-Channel in AES-CCM Tag Verification### Summary AWS-LC is an open-source, general-purpose cryptographic library. ### Impact Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementa…trivy
- AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN### Summary AWS-LC is an open-source, general-purpose cryptographic library. ### Impact A logic error in CN (Common Name) validation allows certificates with wildcard or raw UTF-8 Unicode CN values to bypass name constraints enforcement. The `cn2dnsid` function does not recogn…trivy
- CRL Distribution Point Scope Check Logic Error in AWS-LC### Summary AWS-LC is an open-source, general-purpose cryptographic library. ### Impact A logic error in CRL distribution point matching in AWS-LC allows a revoked certificate to bypass revocation checks during certificate validation, when the application enables CRL checking…trivy
- Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly## Summary The `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous fragments. Readers that read from a `RecvStream` in order (through an `AsyncRead` impl for example) will be sensitive to p…trivy
- rust-openssl provides OpenSSL bindings for the Rust programming langua ...rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.39 to before 0.10.78, EVP_DigestFinal() always writes EVP_MD_CTX_size(ctx) to the out buffer. If out is smaller than that, MdCtxRef::digest_final() writes past its end, usually corrupting the sta…trivyCVE-2026-41681
- rust-openssl provides OpenSSL bindings for the Rust programming langua ...rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk_client_callback, set_psk_server_callback, set_cookie_generate_cb, and set_stateless_cookie_generate_cb forwarded the use…trivyCVE-2026-41898
- rust-openssl provides OpenSSL bindings for the Rust programming langua ...rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.27 to before 0.10.78, Deriver::derive (and PkeyCtxRef::derive) sets len = buf.len() and passes it as the in/out length to EVP_PKEY_derive, relying on OpenSSL to honor it. On OpenSSL 1.1.x, X25519,…trivyCVE-2026-41676
- rust-openssl provides OpenSSL bindings for the Rust programming langua ...rust-openssl provides OpenSSL bindings for the Rust programming language. From to before 0.10.78, aes::unwrap_key() contains an incorrect assertion: it checks that out.len() + 8 <= in_.len(), but this condition is reversed. The intended invariant is out.len() >= in_.len() - 8, …trivyCVE-2026-41678
- rust-openssl: rust-openssl: Arbitrary code execution via specially crafted certificaterust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocsp_responders returns OCSP responder URLs from a certificate's AIA extension as OpensslString, whose Deref<Target = str> wraps the raw bytes with str::from_utf8_unch…trivyCVE-2026-42327
- rustls-webpki: Denial of service via panic on malformed CRL BIT STRING### Summary `bit_string_flags()` in `src/der.rs` panics with an index-out-of-bounds when given a BIT STRING whose content is exactly `[0x00]` (one byte: zero padding bits, zero data bytes). This is reachable through the public API `BorrowedCertRevocationList::from_der()` via the…trivy
This report is public.