ng_server vulnerabilities

CVEs whose affected-version data names the ng_server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-22675Medium· 5.4

7mo ago

OCS Inventory NG Server Stored XSS via User-Agent

OCS Inventory NG Server version 2.12.3 and prior contain a stored cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript by submitting malicious User-Agent HTTP headers to the /ocsinvento…

▾ SunlitOCS Inventory · OCS Inventory NG ServerEPSS 0.22%via CVEORG