490127 matches found
CLSA-2026-1788257456 TuxCare security update for league/commonmark (6 CVEs)
TuxCare rebuilt league/commonmark to address 6 CVEs. Fixed in 2.8.2-p2+tuxcare...
WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ivaylo Atanassov in WordPress Plugin Upsell Order Bump Offer for WooCommerce versions = 3.1.5...
WordPress WCFM Marketplace plugin <= 3.8.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ivaylo Atanassov in WordPress Plugin WCFM Marketplace versions = 3.8.1...
ROOT-APP-NPM-CVE-2025-68429 CVE-2025-68429 in storybook - Patched by Root
Root has patched CVE-2025-68429 in the storybook package for Root:npm. Multiple fixed versions available...
CVE-2026-49263 affecting package rust for versions less than 1.90.0-10
CVE-2026-49263 affecting package rust for versions less than 1.90.0-10. A patched version of the package is available...
CVE-2026-55894 affecting package rust for versions less than 1.96.1-1
CVE-2026-55894 affecting package rust for versions less than 1.96.1-1. A patched version of the package is available...
CVE-2026-49282 affecting package rust for versions less than 1.90.0-10
CVE-2026-49282 affecting package rust for versions less than 1.90.0-10. A patched version of the package is available...
CVE-2026-43871 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17
CVE-2026-43871 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17. A patched version of the package is available...
CVE-2026-48586 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17
CVE-2026-48586 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17. A patched version of the package is available...
CVE-2026-55969 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17
CVE-2026-55969 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17. A patched version of the package is available...
PT-2026-84816
Name of the Vulnerable Software and Affected Versions exiv2 versions prior to 0.28.9-1.1 Description An out of bounds read occurs in the decodeBasic function within CrwMap. An out of bounds read is a condition where a program reads data past the end of the intended buffer, which can lead to crash...
PT-2026-84687
Name of the Vulnerable Software and Affected Versions Authorizer versions prior to 3.15.2 Description An unauthenticated privilege escalation issue exists, allowing an attacker to gain elevated privileges without providing valid credentials. Recommendations Update to a version newer than 3.15.1...
libssh security update
0.9.6-17 - Backport CVE patches from 0.11.5 Resolves: RHEL-215677 Resolves: RHEL-215674 Resolves: RHEL-215680 Resolves: RHEL-215678 Resolves: RHEL-215675 Resolves: RHEL-215676 Resolves: RHEL-215679...
proxy v0.7.0
git-pkgs proxy A caching proxy for package registries. Speeds up package downloads by caching artifacts locally, reducing bandwidth usage and improving reliability. Version Cooldown Most supply chain attacks rely on speed: a malicious version gets published and consumed by automated pipelines...
EUVD-2026-42312
Socket.IO: Engine.IO WebTransport SID DoS...
CVE-2026-82852
Unauthenticated Server Side Request Forgery SSRF in MapSVG = 8.15.0 versions...
CVE-2026-82224
Unauthenticated Cross Site Scripting XSS in SliceWP = 1.2.10 versions...
CVE-2026-82225
Unauthenticated Broken Authentication in RegistrationMagic = 6.0.9.8 versions...