Fedora 43 : nextcloud (2026-5afe6630dc)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5afe6630dc advisory. 33.0.6 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

CVE-2026-41149

CVE-2026-41149 affects Mermaid state diagrams via improper sanitization of the classDef directive, allowing DOM injection that can escape the SVG context. Concrete details: vulnerable in Mermaid versions ≤10.9.5 and 11.0.0-alpha.1–11.14.0; fixed in 10.9.6 and 11.15.0. The issue is mitigated by st...