CVE-2026-74253: Improper Control of Generation of Code

Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes source blocks found in Joomla’s final rendered HTML without reliably determining where that code originated...

CVE-2026-74390

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix out-of-bounds write in irdmacopyuserpgaddrs The irdmacopyuserpgaddrs function loops through all of the umem DMA blocks to populate the PBLEs and will stop when either the last DMA block is reached or palloc-totalc...

CVE-2026-72206

In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index block header more strictly Modify ntfsindexblockinconsisent to perform stricter validation of INDEXHEADER geometry in INDX blocks, and update ntfslookupinodebyname to use that function to validate INDX blocks...

CVE-2026-74390 RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix out-of-bounds write in irdmacopyuserpgaddrs The irdmacopyuserpgaddrs function loops through all of the umem DMA blocks to populate the PBLEs and will stop when either the last DMA block is reached or palloc-totalc...

EUVD-2026-59537

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix out-of-bounds write in irdmacopyuserpgaddrs The irdmacopyuserpgaddrs function loops through all of the umem DMA blocks to populate the PBLEs and will stop when either the last DMA block is reached or palloc-totalc...

PT-2026-72394

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where index block headers are not strictly validated. The fix involves modifying the ntfs index block inconsisent function to implement stricter...

Malicious code in blocks-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fc5edc76efb69b1da38c78d3ee103dd217098b5c8267a48d360a40086c84a72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14000 Malicious code in blocks-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fc5edc76efb69b1da38c78d3ee103dd217098b5c8267a48d360a40086c84a72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview blocks-angular is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Duplicate Advisory: Embedded (transclusion) block content is returned without publish-access filtering, leaking private and password-protected document content to anonymous readers

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-h6w7-xxcf-w2mq. This link is maintained to preserve external references. Original Description SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the getBlockDOMWithEmbed and...

gps-building-blocks (>=1.2.3, <=1.25.0) potentially affected by CVE-2026-68969 via apache-airflow (1.10.14)

apache-airflow PYPI version 1.10.14 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - gps-building-blocks =1.2.3, =1.25.0 Source cves: CVE-2026-68969 Source advisory: OSV:GHSA-CJV4-7HP2-2X9H...

gps-building-blocks (>=1.2.3, <=1.25.0) potentially affected by CVE-2026-68970 via apache-airflow (1.10.14)

apache-airflow PYPI version 1.10.14 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - gps-building-blocks =1.2.3, =1.25.0 Source cves: CVE-2026-68970 Source advisory: OSV:GHSA-F3C2-J7G8-VPP8...

gps-building-blocks (>=1.2.3, <=1.25.0) potentially affected by CVE-2026-68971 via apache-airflow (1.10.14)

apache-airflow PYPI version 1.10.14 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - gps-building-blocks =1.2.3, =1.25.0 Source cves: CVE-2026-68971 Source advisory: OSV:GHSA-5247-M8W9-2V4M...

aglow (>=0.1.0rc3, <=0.1.0rc4), ai-flow (0.3.1) +2 more potentially affected by CVE-2026-68971 via apache-airflow (2.0.0)

apache-airflow PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - aglow =0.1.0rc3, =0.1.0rc4 - ai-flow 0.3.1 - dataverk-airflow 0.3.12 - gps-building-blocks 1.2.2 Source cves: CVE-2026-68971 Source...

gps-building-blocks (>=1.2.3, <=1.25.0) potentially affected by CVE-2026-68076 via apache-airflow (1.10.14)

apache-airflow PYPI version 1.10.14 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - gps-building-blocks =1.2.3, =1.25.0 Source cves: CVE-2026-68076 Source advisory: OSV:GHSA-75MG-C62R-V95G...

aglow (>=0.1.0rc3, <=0.1.0rc4), ai-flow (0.3.1) +2 more potentially affected by CVE-2026-54183 via apache-airflow (2.0.0)

apache-airflow PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - aglow =0.1.0rc3, =0.1.0rc4 - ai-flow 0.3.1 - dataverk-airflow 0.3.12 - gps-building-blocks 1.2.2 Source cves: CVE-2026-54183 Source...

aglow (>=0.1.0rc3, <=0.1.0rc4), ai-flow (0.3.1) +2 more potentially affected by CVE-2026-59242 via apache-airflow (2.0.0)

apache-airflow PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - aglow =0.1.0rc3, =0.1.0rc4 - ai-flow 0.3.1 - dataverk-airflow 0.3.12 - gps-building-blocks 1.2.2 Source cves: CVE-2026-59242 Source...

gps-building-blocks (>=1.2.3, <=1.25.0) potentially affected by CVE-2026-59242 via apache-airflow (1.10.14)

apache-airflow PYPI version 1.10.14 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - gps-building-blocks =1.2.3, =1.25.0 Source cves: CVE-2026-59242 Source advisory: OSV:GHSA-FCMM-42R9-MMMM...

gps-building-blocks (>=1.2.3, <=1.25.0) potentially affected by CVE-2026-54183 via apache-airflow (1.10.14)

apache-airflow PYPI version 1.10.14 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - gps-building-blocks =1.2.3, =1.25.0 Source cves: CVE-2026-54183 Source advisory: OSV:GHSA-G4QJ-5VXV-WGGF...

gps-building-blocks (>=1.2.3, <=1.25.0) potentially affected by CVE-2026-68968 via apache-airflow (1.10.14)

apache-airflow PYPI version 1.10.14 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - gps-building-blocks =1.2.3, =1.25.0 Source cves: CVE-2026-68968 Source advisory: OSV:GHSA-J4JC-CQ9H-XRHR...