Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service. The extension, named "Twitch Enhanced Viewer | JeetBot," lists HISHIMIRO/jeetbot.cc as its developer and has the following...

WordPress MultiVendorX plugin < 5.0.11 - Store Owner+ Cross-Store Commission Data Disclosure via commissions REST Endpoint vulnerability

Store Owner+ Cross-Store Commission Data Disclosure via commissions REST Endpoint vulnerability discovered by ryan fabella in WordPress Plugin MultiVendorX versions 5.0.11...

EUVD-2025-210627

When secondary user stores are configured, the implicit-association resolver incorrectly initializes from a secondary user store and bypasses the primary user store during search and uniqueness checks. This allows a subject to be associated with an unintended local account if the same lookup clai...

CVE-2026-16746 MultiVendorX < 5.0.11 - Store Owner+ Cross-Store Commission Data Disclosure via commissions REST Endpoint

The MultiVendorX WordPress plugin before 5.0.11 does not verify that the requested store belongs to the current user in one of its REST API endpoints, allowing any vendor-level user to read other vendors' commission and financial data...

CVE-2026-16746

The MultiVendorX WordPress plugin (versions before 5.0.11 ) contains an authorization bypass vulnerability in one of its REST API endpoints . The root cause is a failure to verify that a requested store belongs to the current user. This allows any user with vendor-level privileges to access and r...

org.resthub:resthub-mongodb (2.1.2), org.springframework.data:spring-data-mongodb-cross-store (1.2.2.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.2.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.resthub:resthub-mongodb 2.1.2 -...

com.github.jknack:mwa-mongo (0.4.0), com.github.jknack:mwa-morphia (0.4.0) +1 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.2.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.jknack:mwa-mongo 0.4.0 - com.github.jknack:mwa-morph...

org.springframework.data:spring-data-mongodb-cross-store (1.9.9.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.9.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.alibaba.smart.framework:smart-engine-extension-storage-mongodb (>=2.0.4, <=2.6.4), org.springframework.boot:spring-boot-starter-data-mongodb (1.4.7.release) +3 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.9.11.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

org.springframework.data:spring-data-mongodb-cross-store (1.3.0.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.3.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

org.springframework.data:spring-data-mongodb-cross-store (1.3.1.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.3.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

org.grails:gorm-mongodb-spring-boot (1.0.0.m1), org.grails:grails-datastore-gorm-mongodb (>=2.0.0.release, <=2.0.1.release) +1 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.4.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.4.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.grails:gorm-mongodb-spring-boot 1.0.0.m1 -...

org.springframework.data:spring-data-mongodb-cross-store (1.7.0.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.7.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.7.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

org.springframework.boot:spring-boot-starter-data-mongodb (>=1.1.11.release, <=1.1.12.release), org.springframework.data:spring-data-mongodb-cross-store (1.5.5.release) +6 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.5.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.5.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

org.springframework.boot:spring-boot-starter-data-mongodb (1.5.5.release), org.springframework.data:spring-data-mongodb-cross-store (1.10.5.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.10.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

org.grails:grails-datastore-gorm-mongo (>=1.0.0.rc5, <=1.0.0.release), org.grails:grails-datastore-mongo (>=1.0.0.rc5, <=1.0.0.release) +2 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.0.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.grails:grails-datastore-gorm-mongo =1.0.0.rc5, =1.0.0.rc5,...

org.springframework.data:spring-data-mongodb-cross-store (2.1.13.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.1.13.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

org.springframework.boot:spring-boot-starter-data-mongodb (2.1.15.release), org.springframework.boot:spring-boot-starter-data-mongodb-reactive (2.1.15.release) +2 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.1.18.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

org.springframework.data:spring-data-mongodb-cross-store (1.10.21.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.10.21.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

org.inigma.shared:inigma-shared (0.1), org.springframework.data:spring-data-mongodb-cross-store (1.0.4.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.0.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.inigma.shared:inigma-shared 0.1 -...