[SECURITY] Fedora 44 Update: python3.15-3.15.0~a8-1.fc44

Python 3.15 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.15 package provides the "python3.15" executable:...

Fedora 43 : python3-docs / python3.14 (2026-9a8fddee0b)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-9a8fddee0b advisory. New minor version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Critical: Red Hat Security Advisory: Red Hat Developer Hub 1.8.6 release.

Red Hat Developer Hub 1.8.6 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

[SECURITY] Fedora 42 Update: python3.12-3.12.13-3.fc42

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

[SECURITY] Fedora 42 Update: python3.15-3.15.0~a8-1.fc42

Python 3.15 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.15 package provides the "python3.15" executable:...

WordPress WP Docs plugin <= 2.2.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpdocs_options[icon_size]' vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting via 'wpdocsoptionsiconsize' vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin WP Docs versions = 2.2.9...

MAL-2026-2746 Malicious code in chainlink-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa71a3bbe3ac61328a09a14db5bdffc3fa0db05f8af79d28c0a31f7c1d3cd7c The package chainlink-docs was found to contain malicious code...

Malicious code in chainlink-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa71a3bbe3ac61328a09a14db5bdffc3fa0db05f8af79d28c0a31f7c1d3cd7c The package chainlink-docs was found to contain malicious code...

EUVD-2026-23168

The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocsoptionsiconsize' parameter in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-3878 WP Docs <= 2.2.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpdocs_options[icon_size]'

The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocsoptionsiconsize' parameter in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-3878 WP Docs <= 2.2.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpdocs_options[icon_size]'

The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocsoptionsiconsize' parameter in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-3878

The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocsoptionsiconsize' parameter in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-3878: Improper Neutralization of Input During Web Page Generation

The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocsoptionsiconsize' parameter in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

WordPress plugin WP Docs 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

PT-2026-33252

The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocs optionsicon size' parameter in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-lev...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tomcat10: tomcat10-10.1.54-1.hum1 noarch tomcat10-admin-webapps-10.1.54-1.hum1 noarch tomcat10-common-10.1.54-1.hum1 noarch tomcat10-docs-webapp-10.1.54-1.hum1 noarch...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: eksctl, harbor, chartmuseum, flux, consul-k8s, cerbos, k9s, kubescape, tigera-operator, tw, helm-set-status, k8ssandra-client, trivy-operator, zot, helm-mapkubeapis, kube-arangodb, pluto, istio, envoy-gateway, cert-manager-cmctl, flux-source-controller, kots, trivy,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: eksctl, harbor, chartmuseum, flux, consul-k8s, cerbos, k9s, kubescape, tigera-operator, tw, helm-set-status, k8ssandra-client, trivy-operator, zot, helm-mapkubeapis, kube-arangodb, pluto, istio, envoy-gateway, cert-manager-cmctl, flux-source-controller, kots, trivy,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: k9s, helm-diff, istio, kots, kubescape-server-fips, consul-k8s-fips, headlamp-fips, helm-operator-fips, chartmuseum, helm-set-status, k9s-fips, kubescape, helm, zarf-fips, cerbos, helm-push, trivy, trivy-operator-fips, flux, nova, jfrog-cli, zot, gitlab-operator,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: mig-parted-fips, prometheus-blackbox-exporter-fips, longhorn-cli, crossplane-provider-aws-firehose-fips, crossplane-provider-aws-wafv2, buildah-fips, kubernetes-replicator-fips, prometheus-postgres-exporter, nsc, argo-cd, cerbos, nri-apache, kubernetes-dashboard-fips...