Security Bulletin:Multiple security vulnerabilities in IBM Process Automation Manager Open Edition Starter Kit for Banking

Summary In addition to many updates of operating system level packages, Multiple vulnerabilities were addressed in IBM Process Automation Manager Open Edition Starter Kit for Banking -9.4.2 Vulnerability Details CVEID:CVE-2026-13676 DESCRIPTION: fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fai...

CVE-2026-13676 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, yaml-language-server, prism, vitess...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.26 security and extras update

Red Hat OpenShift Container Platform release 4.21.26 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

CVE-2026-13676 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, unleash-proxy, kibana, wazuh-dashboard-fips, yaml-language-server, gitlab-rails-ce, keep, opensearch-dashboards-fips, keep-fips, vitess, nextcloud-server, opensearch-dashboards, wazuh-dashboard, arangodb, prism...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @middy/validator (>=5.4.3, <=5.4.4) +5 more potentially affected by CVE-2026-13676 via fast-uri (>=3.0.1, <=3.1.2)

fast-uri NPM version =3.0.1, =0.3.1, =5.4.3, =1.0.0, =1.0.0, =1.25.0, =2.2.0, =2.3.1 Source cves: CVE-2026-13676 Source advisory: OSV:GHSA-4C8G-83QW-93J6...

Security update for python-pydata-sphinx-theme (important)

openSUSE security update: security update for python-pydata-sphinx-theme ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21231-1 Rating: important References: bsc1269597 Cross-References: CVE-2026-13676 CVSS scores: CVE-2026-13676 SUSE : 7.2...

OPENSUSE-SU-2026:21231-1 Security update for python-pydata-sphinx-theme

This update for python-pydata-sphinx-theme fixes the following issues: Changes in python-pydata-sphinx-theme: - CVE-2026-13676: fast-uri: failure to canonicalize Unicode/IDN hostnames for HTTP-family URLs allows for bypass bsc1269597 revendor the vendored tarball with updated versions...

SUSE CVE-2026-13676

fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode IDN hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize and equal still return...

03-api-solid (>=1.0.0, <=1.1.2), 0uth (>=1.0.5, <=1.2.1) +2930 more potentially affected by CVE-2026-13676 via fast-uri (>=2.4.4, <=3.1.2)

fast-uri NPM version =2.4.4, =1.0.0, =1.0.5, =1.0.3, =0.5.2-alpha-20231022145212-c0afe8d, =0.1.4-alpha-20231022145212-c0afe8d, =0.1.4-alpha-20231022145212-c0afe8d, =0.6.0, =0.2.0, =0.2.0, =0.0.1-alpha-20240310235646-1ea207b758e2c4cacf2c0f592448d86a94ff5ba4, =0.3.1, =0.3.4 - @adbl/cartridg...

CVE-2026-13676

creationtimestamp| type| source ---|---|--- 2026-06-29 13:33:30+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mpgm2jo5sk2k 2026-06-29 16:05:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguk3mdpl2d 2026-07-10 16:44:21+00:00| seen|...

EUVD-2021-13676

Malware in sbrugna...

CVE-2024-13676 Categorized Gallery Plugin <= 2.0 - Authenticated (Contributor+) SQL Injection

The Categorized Gallery Plugin plugin for WordPress is vulnerable to SQL Injection via the 'field' attribute of the 'imagegallery' shortcode in all versions up to, and including, 2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2024-13676

CVE-2024-13676 affects the WordPress plugin Categorized Gallery Plugin (

CVE-2024-13676 Categorized Gallery Plugin <= 2.0 - Authenticated (Contributor+) SQL Injection

The Categorized Gallery Plugin plugin for WordPress is vulnerable to SQL Injection via the 'field' attribute of the 'imagegallery' shortcode in all versions up to, and including, 2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2019-13676

creationtimestamp| type| source ---|---|--- 2024-02-27 09:46:10+00:00| seen| https://t.me/ctinow/194150...

CVE-2020-13676

The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the QuickEdit module which comes with the Standard profile is installed...

CVE-2020-13676

The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the QuickEdit module which comes with the Standard profile is installed...

CVE-2020-13676

CVE-2020-13676 involves the Drupal QuickEdit module (Standard profile) failing to properly enforce access to fields, potentially leading to unintended disclosure of field data. The issue affects sites where QuickEdit is installed; the vulerability description indicates a partial confidentiality i...

CVE-2020-13676

The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the QuickEdit module which comes with the Standard profile is installed...

CVE-2021-31511

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...