CVE-2026-52989 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-52989 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53225 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53225 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53086 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53086 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53131 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53131 affecting package kernel for versions less than 6.6.143.1-1. A patched version of the package is available...

CVE-2026-39828 affecting package gh for versions less than 2.62.0-17

CVE-2026-39828 affecting package gh for versions less than 2.62.0-17. A patched version of the package is available...

CVE-2026-25680 affecting package containerd2 for versions less than 2.2.4-4

CVE-2026-25680 affecting package containerd2 for versions less than 2.2.4-4. A patched version of the package is available...

CVE-2026-52923 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-52923 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

NPM: Better Auth: OAuth refresh-token rotation forks the token family on concurrent redemption

NPM: Better Auth: OAuth refresh-token rotation forks the token family on concurrent redemption vulnerability discovered by ? in WordPress Npm better-auth versions = 1.4.8-beta.7, 1.6.0...

NPM: Better Auth has an account takeover issue via OAuth auto-link to unverified pre-registered email

NPM: Better Auth has an account takeover issue via OAuth auto-link to unverified pre-registered email vulnerability discovered by ? in WordPress Npm better-auth versions 1.6.11...

NPM: Better Auth vulnerable to unauthorized invitation acceptance via unverified email match in organization plugin

NPM: Better Auth vulnerable to unauthorized invitation acceptance via unverified email match in organization plugin vulnerability discovered by ? in WordPress Npm better-auth versions 1.6.11...

PYSEC-2026-2045 Werkzeug safe_join not safe on Windows

On Python = 3.11, or not using Windows, are not vulnerable...

PYSEC-2026-1797 Cross-Frame Scripting vulnerability has been found on Plone CMS

A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting version below 6.0.5. An attacker could store a malicious URL to be opened by an administrator and execute a malicios iframe element...

CVE-2026-22555 Gitea organization forks can expose organization secrets without create permission

Gitea versions before 1.26.0 allow API users to fork a repository into an organization without first passing the CanCreateOrgRepo check, which can expose organization secrets...

EUVD-2026-41530

A vulnerability exists in the Kong Konnect Model Context Protocol MCP server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injection attack and execute unintended API requests...

NPM: 9router: Missing Authorization and OS Command Injection

NPM: 9router: Missing Authorization and OS Command Injection vulnerability discovered by ? in WordPress Npm 9router versions 0.4.44...

CVE-2026-57764

Contributor Cross Site Scripting XSS in Surbma | Yoast SEO Breadcrumb Shortcode = 1.2 versions...

CVE-2026-54906 affecting package rubygem-concurrent-ruby for versions less than 1.3.7-1

CVE-2026-54906 affecting package rubygem-concurrent-ruby for versions less than 1.3.7-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-54371 affecting package acl for versions less than 2.4.0-1

CVE-2026-54371 affecting package acl for versions less than 2.4.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55203 affecting package haproxy for versions less than 2.9.11-7

CVE-2026-55203 affecting package haproxy for versions less than 2.9.11-7. A patched version of the package is available...

CVE-2026-12505 affecting package cifs-utils for versions less than 7.6-1

CVE-2026-12505 affecting package cifs-utils for versions less than 7.6-1. An upgraded version of the package is available that resolves this issue...