CVE-2026-54702 Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, constructs a command in the crossnote namespace, and invokes...

EUVD-2026-101585

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, constructs a command in the crossnote namespace, and invokes...

CVE-2026-54702

The Markdown Preview Enhanced extension for Visual Studio Code is vulnerable to Blind Command Dispatch in versions prior to 0.8.30 . The webview message handler in src/preview-provider.ts fails to perform allowlist or type validation on attacker-controlled command values and arguments within the ...

CVE-2026-54702 Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, constructs a command in the crossnote namespace, and invokes...

HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution

A flaw was found in HP Linux Imaging and Printing HPLIP software. Multiple vulnerabilities exist within several software components that could potentially allow an attacker to achieve remote code execution, escalate privileges, cause a denial of service, disclose information, or modify files...

hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities

A flaw was found in HPLIP. Multiple vulnerabilities in several software components could potentially allow a remote attacker to achieve remote code execution or privilege escalation under certain conditions, requiring user interaction. These flaws could also lead to denial of service, information...

hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service.

A flaw was found in HP Linux Imaging and Printing HPLIP Software. Multiple vulnerabilities in several software components could allow a remote attacker to execute arbitrary code, escalate privileges, or cause a denial of service. Additionally, these flaws could lead to information disclosure or...

hplip: HPLIP: Multiple vulnerabilities allow remote code execution, privilege escalation, and denial of service.

A flaw was found in HP Linux Imaging and Printing HPLIP Software. Multiple vulnerabilities in several software components could allow a remote attacker to execute arbitrary code, escalate privileges, or cause a denial of service. Additionally, these flaws could lead to information disclosure or...

hplip: HPLIP: Multiple vulnerabilities leading to remote code execution, privilege escalation, and denial of service

A flaw was found in HPLIP HP Linux Imaging and Printing software. This issue encompasses multiple vulnerabilities across several components, potentially allowing an attacker to achieve remote code execution, elevate their privileges, or cause a denial of service. Additionally, these flaws could...

hplip: HPLIP: Remote code execution and privilege escalation vulnerabilities

A flaw was found in HPLIP. Multiple vulnerabilities in several software components could potentially allow a remote attacker to achieve remote code execution or privilege escalation under certain conditions, requiring user interaction. These flaws could also lead to denial of service, information...

CVE-2026-94538

The WP File Download plugin for WordPress is vulnerable to an authorization bypass in all versions up to and including 6.3.9 . The root cause is the plugin's failure to properly verify user authorization when performing specific actions. This allows authenticated attackers with subscriber-level a...

WordPress WP File Download plugin <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion/Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary File Deletion/Modification vulnerability discovered by t4g0 in WordPress Plugin WP File Download versions = 6.3.9...

CVE-2026-101024

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitati...

CVE-2026-63328

A flaw was found in Trivy, a security scanner. The plugin manager does not properly confine plugin names to their designated root directory. This allows an attacker, by persuading a user to install or run a malicious plugin, to write the plugin manifest and binary to arbitrary user-writable paths...

CVE-2026-86684

A flaw was found in Gitea. An improper authorization check in the push mirror API allows an authenticated repository administrator to bypass local file system access restrictions. When a repository owner has permission to use local paths, an administrator lacking that privilege can configure a pu...

CVE-2026-107174

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-107174

A security boundary bypass vulnerability exists in source-to-image due to improper sanitization of symbolic links during archive unpacking. An attacker providing a malicious builder image can embed absolute symbolic links pointing outside the extraction directory. This flaw allows the attacker to...

EUVD-2026-94367

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-107174 Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-107174

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...