PT-2026-36364

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds array access can occur in the ucsi connector change function. This happens because the connector number extracted from the Command Completion Interface CCI via UCSI CCI...

CVE-2026-3903

CVE-2026-3903 concerns the Modular DS: Monitor, update, and backup multiple websites plugin for WordPress (Modular Connector

CVE-2026-3903 Modular Connector <= 2.5.1 - Cross-Site Request Forgery via postConfirmOauth

The Modular DS: Monitor, update, and backup multiple websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.1. This is due to missing nonce validation on the postConfirmOauth function. This makes it possible for unauthenticated attacker...

WordPress Modular Connector plugin <= 2.5.1 - Cross-Site Request Forgery via postConfirmOauth vulnerability

Cross-Site Request Forgery via postConfirmOauth vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Modular DS versions = 2.5.1...

SQL Injection

CocoIndex is vulnerable to SQL Injection. The vulnerability is due to insufficient validation of the configured table name in the Doris target connector, where untrusted input may be used to construct ALTER TABLE SQL statements, allowing attackers to inject malicious SQL during schema changes...

CVE-2025-12183 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, kafka, debezium-connector-informix, debezium-connector-spanner, debezium-connector-db2, debezium-connector-vitess, spark, debezium-connector-ibmi, debezium, zipkin, cassandra...

GHSA-VQF4-7M7X-WGFC vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, kafka, debezium-connector-informix, debezium-connector-spanner, debezium-connector-db2, debezium-connector-vitess, spark, debezium-connector-ibmi, debezium, zipkin, cassandra...

GHSA-CMP6-M4WJ-Q63Q vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, kafka, debezium-connector-informix, debezium-connector-spanner, debezium-connector-db2, debezium-connector-vitess, spark, debezium-connector-ibmi, sonarqube, debezium, zipkin, cassandra...

CVE-2025-66566 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, kafka, debezium-connector-informix, debezium-connector-spanner, debezium-connector-db2, debezium-connector-vitess, spark, debezium-connector-ibmi, sonarqube, debezium, zipkin, cassandra...

GHSA-VQF4-7M7X-WGFC vulnerabilities

Vulnerabilities for packages: debezium-connector-vitess, debezium-connector-db2, debezium-connector-ibmi, logstash, knative-kafka-broker-fips, kafka, debezium, kafka-fips, debezium-connector-spanner, kafbat-ui-fips, elasticsearch, debezium-connector-informix, strimzi-kafka-operator, opensearch,...

CVE-2025-12183 vulnerabilities

Vulnerabilities for packages: debezium-connector-vitess, debezium-connector-db2, debezium-connector-ibmi, logstash, knative-kafka-broker-fips, kafka, debezium, kafka-fips, debezium-connector-spanner, kafbat-ui-fips, elasticsearch, debezium-connector-informix, strimzi-kafka-operator, opensearch,...

GHSA-CMP6-M4WJ-Q63Q vulnerabilities

Vulnerabilities for packages: debezium-connector-vitess, debezium-connector-db2, debezium-connector-ibmi, logstash, knative-kafka-broker-fips, kafka, debezium, kafka-fips, debezium-connector-spanner, kafbat-ui-fips, debezium-connector-informix, strimzi-kafka-operator, opensearch,...

CVE-2025-66566 vulnerabilities

Vulnerabilities for packages: debezium-connector-vitess, debezium-connector-db2, debezium-connector-ibmi, logstash, knative-kafka-broker-fips, kafka, debezium, kafka-fips, debezium-connector-spanner, kafbat-ui-fips, debezium-connector-informix, strimzi-kafka-operator, opensearch,...

CVE-2026-28438

CocoIndex is a data transformation framework for AI. Prior to version 0.3.34, the Doris target connector didn't verify the configured table name before creating some SQL statements ALTER TABLE. So, in the application code, if the table name is provided by an untrusted upstream, it expose...

PYSEC-2026-2133

CocoIndex is a data transformation framework for AI. Prior to version 0.3.34, the Doris target connector didn't verify the configured table name before creating some SQL statements ALTER TABLE. So, in the application code, if the table name is provided by an untrusted upstream, it expose...

CVE-2026-28438 CocoIndex Doris target connector didn't verify table name when constructing ALTER TABLE statements

CocoIndex is a data transformation framework for AI. Prior to version 0.3.34, the Doris target connector didn't verify the configured table name before creating some SQL statements ALTER TABLE. So, in the application code, if the table name is provided by an untrusted upstream, it expose...

CVE-2026-28438 CocoIndex Doris target connector didn't verify table name when constructing ALTER TABLE statements

CocoIndex is a data transformation framework for AI. Prior to version 0.3.34, the Doris target connector didn't verify the configured table name before creating some SQL statements ALTER TABLE. So, in the application code, if the table name is provided by an untrusted upstream, it expose...

CVE-2026-28438

CocoIndex is a data transformation framework for AI. Prior to version 0.3.34, the Doris target connector didn't verify the configured table name before creating some SQL statements ALTER TABLE. So, in the application code, if the table name is provided by an untrusted upstream, it expose...

CocoIndex SQL注入漏洞

CocoIndex is an open-source high-performance framework for AI data conversion developed by CocoIndex. Versions of CocoIndex prior to 0.3.34 contained a SQL injection vulnerability. This vulnerability occurred because the Doris target connector did not validate the configured table names, which...

AZL-79371 CVE-2026-3381 affecting package mariadb-connector-c 3.1.10-6

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib. Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for...