CVE-2026-105872: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in mklacroix Product Configurator for WooCommerce product-configurator-for-woocommerce allows Object Injection.This issue affects Product Configurator for WooCommerce: from n/a through 1.7.5...

WordPress Product Configurator for WooCommerce plugin <= 1.7.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Product Configurator for WooCommerce versions = 1.7.5...

image-crawl (0.1.0), opentrons (>=4.6.0a0, <=7.1.1a0) +4 more potentially affected by CVE-2026-64847 via anyio (3.3.0)

anyio PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - image-crawl 0.1.0 - opentrons =4.6.0a0, =0.3.0, =0.1.0, =1.0.0, =1.2.0 Source cves: CVE-2026-64847 Source advisory: OSV:PYSEC-2026-4024...

image-crawl (0.1.0), opentrons (>=4.6.0a0, <=7.1.1a0) +4 more potentially affected by CVE-2026-63374 via anyio (3.3.0)

anyio PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - image-crawl 0.1.0 - opentrons =4.6.0a0, =0.3.0, =0.1.0, =1.0.0, =1.2.0 Source cves: CVE-2026-63374 Source advisory: OSV:GHSA-82R6-8W77-94W6...

MAL-2026-16009 Malicious code in omni-channel-configurator-wireline-frontend (npm)

This package is malicious. It is not a real library. An attacker put it on the public npm registry. The package name is a copy of a private, internal package name. This is a dependency confusion attack. A build that gets the name from public npm installs this package in place of the real one. The...

Malicious code in omni-channel-configurator-wireline-frontend (npm)

This package is malicious. It is not a real library. An attacker put it on the public npm registry. The package name is a copy of a private, internal package name. This is a dependency confusion attack. A build that gets the name from public npm installs this package in place of the real one. The...

MAL-2026-15940 Malicious code in oce-configurator-wireless-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191e4a78bf46781b56b290aac7b804fd9470b1ac189896b950afbaba548183e6 Package name resembles an internal Swisscom OCE package and is published at version 9999.0.0 to win resolution against a private registry. The...

Malicious code in oce-configurator-wireless-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191e4a78bf46781b56b290aac7b804fd9470b1ac189896b950afbaba548183e6 Package name resembles an internal Swisscom OCE package and is published at version 9999.0.0 to win resolution against a private registry. The...

Malicious Package

Overview omni-channel-configurator-wireline-frontend is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview oce-configurator-wireless-frontend is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

WordPress Product Configurator for WooCommerce plugin < 1.7.3 - Unauthenticated Private/Draft Product Data Disclosure via pc_get_data vulnerability

Unauthenticated Private/Draft Product Data Disclosure via pcgetdata vulnerability discovered by Ahmed Hashim Ismael in WordPress Plugin Product Configurator for WooCommerce versions 1.7.3...

GO-2024-2825 vulnerabilities

Vulnerabilities for packages: rekor, stern, kaf, caddy, q, hcloud, flux-kustomize-controller, configmap-reload, kind, argo-workflows, jitsucom-bulker, kyverno-policy-reporter-ui, pulumi-kubernetes-operator, redka, kustomize, mockery, petname, dynamic-localpv-provisioner, gomplate, go-md2man,...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, dataplaneapi, nats, jitsucom-bulker, kubernetes, crossplane-provider-aws-ec2, petname, age, kubecolor, src-fingerprint, aactl, stakater-reloader, terraform-provider-aws, dgraph, kubernetes-ingress-defaultbackend,...

FreeBSD : MySQL 9.7 -- Multiple vulnerabilities (10f5f76e-90a5-11f1-bc30-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 10f5f76e-90a5-11f1-bc30-3497f65b111b advisory. The Oracle Critical Patch Update of July 2026 addresses 54 issues in Oracle MySQL, 43 of which...

CLEANSTART-2026-CQ71708 Security fixes in newrelic-prometheus-configurator 2.9.0-r0

Package newrelic-prometheus-configurator version 2.9.0-r0 fixes 12 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820...

openSUSE 16 Security Update : nm-configurator (openSUSE-SU-2026:21428-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21428-1 advisory. This update for nm-configurator fixes the following issue Update to version 0.3.5. Security issue fixed: - CVE-2026-25541: bytes: integer overflow in...

OPENSUSE-SU-2026:21428-1 Security update for nm-configurator

This update for nm-configurator fixes the following issue Update to version 0.3.5. Security issue fixed: - CVE-2026-25541: bytes: integer overflow in BytesMut:reserve can lead to undefined behavior and crashes bsc1271392. Other updates and bugfixes: - Version 0.3.5: Bump version to v0.3.5 206 Bum...

SUSE-SU-2026:22935-1 Security update for nm-configurator

This update for nm-configurator fixes the following issue Update to version 0.3.5. Security issue fixed: - CVE-2026-25541: bytes: integer overflow in BytesMut:reserve can lead to undefined behavior and crashes bsc1271392. Other updates and bugfixes: - Version 0.3.5: Bump version to v0.3.5 206 Bum...

EUVD-2026-46978

Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards component: Configuration Management. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

EUVD-2026-46587

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Configurator. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the...