NPM: Mermaid allows CSS injection applying to sibling elements of the diagram

NPM: Mermaid allows CSS injection applying to sibling elements of the diagram vulnerability discovered by ? in WordPress Npm mermaid versions 10.9.8...

CVE-2026-65578 WordPress Agora theme <= 1.9 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Agora = 1.9 versions...

CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1

CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56852 affecting package flannel for versions less than 0.24.2-29

CVE-2026-56852 affecting package flannel for versions less than 0.24.2-29. A patched version of the package is available...

CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7

CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7. A patched version of the package is available...

CVE-2026-56852 affecting package moby-containerd-cc for versions less than 1.7.7-16

CVE-2026-56852 affecting package moby-containerd-cc for versions less than 1.7.7-16. A patched version of the package is available...

CVE-2026-66033 affecting package libssh2 for versions less than 1.11.1-5

CVE-2026-66033 affecting package libssh2 for versions less than 1.11.1-5. A patched version of the package is available...

CVE-2026-66488 Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2

Joomla Extension - balbooa.com - Payment bypass in Gridbox 2.20.2...

CVE-2026-65943 Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI < 9.11.0

Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI 9.11.0...

CVE-2026-54478 affecting package unbound for versions less than 1.25.2-1

CVE-2026-54478 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-65919 Meshery < 1.0.57 Unauthenticated Arbitrary File Read via fileView and fileDownload

Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability in the /api/system/fileView and /api/system/fileDownload endpoints that pass user-supplied file parameters directly to os.Open without path validation. Attackers can supply absolute paths or traversal sequences in...

NPM: body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement

NPM: body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement vulnerability discovered by ? in WordPress Npm body-parser versions 1.20.6...

CVE-2026-46252 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-46252 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-53488 affecting package moby-containerd-cc for versions less than 1.7.7-15

CVE-2026-53488 affecting package moby-containerd-cc for versions less than 1.7.7-15. A patched version of the package is available...

CVE-2026-42502 affecting package multus for versions less than 4.0.2-9

CVE-2026-42502 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...

CVE-2026-53150 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53150 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-25681 affecting package keda for versions less than 2.14.1-14

CVE-2026-25681 affecting package keda for versions less than 2.14.1-14. A patched version of the package is available...

CVE-2026-42502 affecting package cni-plugins for versions less than 1.4.0-6

CVE-2026-42502 affecting package cni-plugins for versions less than 1.4.0-6. A patched version of the package is available...

CVE-2026-53117 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53117 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53295 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53295 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...