93 matches found
CVE-2026-73621 GitPython before 3.1.56 Arbitrary File Truncation via Commit.count
GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count method, which forwards keyword arguments to 'git rev-list' without the checkunsafeoptions guard present in the sibling iteritems method. An attacker who can control options passed to Commit.count e.g., via an...
CVE-2026-65485
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
CVE-2026-65485
CVE-2026-65485 affects the WordPress plugin Content Control
EUVD-2026-48096
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
CVE-2026-65485
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
CVE-2026-65485 WordPress Content Control plugin <= 2.6.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
CVE-2026-65485: Missing Authorization
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
PT-2026-63906
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
WordPress Content Control plugin <= 2.6.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Que Thanh Tuan in WordPress Plugin Content Control versions = 2.6.5...
CVE-2026-59930
A flaw was found in Mistune, a Python Markdown parser. The table of contents toc plugin and TableOfContents directive generate heading identifiers IDs as predictable values e.g., tocN without properly processing the heading text. This allows an attacker to control content with a colliding ID, whi...
Directory Traversal
Overview liquidjs is an A simple, expressive, safe and Shopify compatible template engine in pure JavaScript. Affected versions of this package are vulnerable to Directory Traversal via the Loader.candidates resolution when require.resolve is used as a fallback; an attacker can read arbitrary...
CVE-2018-1000604
A persisted cross-site scripting vulnerability exists in Jenkins Badge Plugin 1.4 and earlier in BadgeSummaryAction.java, HtmlBadgeAction.java that allows attackers able to control build badge content to define JavaScript that would be executed in another user's browser when that other user...
EUVD-2020-19501
Malware in sbrugna...
EUVD-2024-16408
Malicious code in bioql PyPI...
EUVD-2022-51850
Malicious code in bioql PyPI...
EUVD-2025-13823
Malicious code in bioql PyPI...
EUVD-2024-54000
Malicious code in bioql PyPI...
EUVD-2024-0652
Malicious code in bioql PyPI...
Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2025-1966)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
