khoj-assistant (>=0.1.0, <=0.3.0a1676209086), lama-cleaner (>=0.24.0, <=0.29.1) +1 more potentially affected by CVE-2026-9856 via transformers (4.21.0)

transformers PYPI version 4.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - khoj-assistant =0.1.0, =0.24.0, =0.29.1 - med-clip-weixiong 0.0.5 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

OESA-2026-3217 python-lxml security update

\ Security Fixes: lxmlhtmlclean.Cleaner does not strip javascript: URLs from namespaced URL attributes xlink:href. The vulnerability exists because Cleaner filters URL schemes by walking links via rewritelinks, which delegates to iterlinks, which only yields attributes named in...

PT-2026-65967

Trend AI Cleaner One Pro Link Following Arbitrary File Deletion Vulnerability...

Trend AI Cleaner One Pro Link Following Arbitrary File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on affected installations of TrendLife Cleaner One Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Jun...

CVE-2026-4912

The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.0.3. This is due to the geturlsfromhtml function using DOMDocument::loadHTMLFile to fetch iframe source URLs with an insufficient hostname validation...

CVE-2026-4912 Media Cleaner: Clean your WordPress! <= 7.0.3 - Authenticated (Administrator+) Server-Side Request Forgery

The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.0.3. This is due to the geturlsfromhtml function using DOMDocument::loadHTMLFile to fetch iframe source URLs with an insufficient hostname validation...

CVE-2026-4912 Media Cleaner: Clean your WordPress! <= 7.0.3 - Authenticated (Administrator+) Server-Side Request Forgery

The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.0.3. This is due to the geturlsfromhtml function using DOMDocument::loadHTMLFile to fetch iframe source URLs with an insufficient hostname validation...

EUVD-2026-49990

The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.0.3. This is due to the geturlsfromhtml function using DOMDocument::loadHTMLFile to fetch iframe source URLs with an insufficient hostname validation...

CVE-2026-4912

The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.0.3. This is due to the geturlsfromhtml function using DOMDocument::loadHTMLFile to fetch iframe source URLs with an insufficient hostname validation...

CVE-2026-4912

CVE-2026-4912 : The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to and including 7.0.3. The vulnerability is caused by get_urls_from_html() using DOMDocument::loadHTMLFile() to fetch iframe source URLs with an insuffici...

EUVD-2026-49655

Unauthenticated Cross Site Scripting XSS in Anti Spam and list cleaner AcyChecker = 1.8.1 versions...

CVE-2026-4912: Server-Side Request Forgery (SSRF)

The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.0.3. This is due to the geturlsfromhtml function using DOMDocument::loadHTMLFile to fetch iframe source URLs with an insufficient hostname validation...

CVE-2026-65448

Unauthenticated Cross Site Scripting XSS in Anti Spam and list cleaner AcyChecker = 1.8.1 versions...

CVE-2026-65448 WordPress Anti Spam and list cleaner – AcyChecker plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Anti Spam and list cleaner AcyChecker = 1.8.1 versions...

WordPress Media Cleaner: Clean your WordPress! plugin <= 7.0.3 - Authenticated (Administrator+) Server-Side Request Forgery vulnerability

Authenticated Administrator+ Server-Side Request Forgery vulnerability discovered by lucsob in WordPress Plugin Media Cleaner versions = 7.0.3...

PT-2026-65326

Name of the Vulnerable Software and Affected Versions Anti Spam and list cleaner – AcyChecker versions prior to 1.8.2 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations...

CVE-2026-65448: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Anti Spam and list cleaner – AcyChecker = 1.8.1 versions...

CVE-2026-64873 Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services...

CVE-2026-64873 Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services...

CVE-2026-64873

The Cache Cleaner Pro extension for Joomla (by regularlabs.com) is vulnerable to Server-Side Request Forgery (SSRF) . This vulnerability allows an attacker to use custom query URLs to access internal or reserved network services. Exploitation details are not provided in the documents. No remediat...