wagtail-sb-admin-interface (>=0.6.0, <=0.7.0), wagtail-sb-codefield (0.4.0) +4 more potentially affected by unknown CVE via wagtail (6.0.0rc1)

wagtail PYPI version 6.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-sb-admin-interface =0.6.0, =0.1.0, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-JM5P-837G-RV8G...

wagtail-sb-admin-interface (>=0.6.0, <=0.7.0), wagtail-sb-codefield (0.4.0) +4 more potentially affected by unknown CVE via wagtail (6.0.0rc1)

wagtail PYPI version 6.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-sb-admin-interface =0.6.0, =0.1.0, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-X5CX-W6P2-MXF2...

wagtail-sb-admin-interface (>=0.0.0, <=0.5.0), wagtail-sb-codefield (>=0.1.0, <=0.3.0) +2 more potentially affected by unknown CVE via wagtail (5.0.0rc1)

wagtail PYPI version 5.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-sb-admin-interface =0.0.0, =0.1.0, =0.1.0, =0.4.0, =0.6.0 Source cves: unknown CVE Source advisory: OSV:GHSA-X5CX-W6P2-MXF2...

wagtail-sb-admin-interface (>=0.6.0, <=0.7.0), wagtail-sb-codefield (0.4.0) +4 more potentially affected by unknown CVE via wagtail (6.0.0rc1)

wagtail PYPI version 6.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-sb-admin-interface =0.6.0, =0.1.0, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-92HV-J533-69WC...

wagtail-sb-admin-interface (>=0.6.0, <=0.7.0), wagtail-sb-codefield (0.4.0) +4 more potentially affected by CVE-2026-55468 via wagtail (6.0.0rc1)

wagtail PYPI version 6.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-sb-admin-interface =0.6.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-55468 Source advisory: OSV:GHSA-3VRH-M9W7-V94F...

wagtail-sb-admin-interface (>=0.6.0, <=0.7.0), wagtail-sb-codefield (0.4.0) +4 more potentially affected by CVE-2026-54262 via wagtail (6.0.0rc1)

wagtail PYPI version 6.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-sb-admin-interface =0.6.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-54262 Source advisory: OSV:GHSA-8634-MR4J-R72C...

wagtail-sb-admin-interface (>=0.6.0, <=0.7.0), wagtail-sb-codefield (0.4.0) +4 more potentially affected by CVE-2026-54261 via wagtail (6.0.0rc1)

wagtail PYPI version 6.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-sb-admin-interface =0.6.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-54261 Source advisory: OSV:GHSA-R6P4-GRQ7-XM4M...

wagtail-sb-admin-interface (>=0.0.0, <=0.5.0), wagtail-sb-codefield (>=0.1.0, <=0.3.0) +2 more potentially affected by CVE-2026-54260 via wagtail (5.0.0rc1)

wagtail PYPI version 5.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-sb-admin-interface =0.0.0, =0.1.0, =0.1.0, =0.4.0, =0.6.0 Source cves: CVE-2026-54260 Source advisory: OSV:GHSA-F2P5-J6FG-5CXF...

wagtail-sb-admin-interface (>=0.0.0, <=0.5.0), wagtail-sb-codefield (>=0.1.0, <=0.3.0) +2 more potentially affected by CVE-2026-54259 via wagtail (5.0.0rc1)

wagtail PYPI version 5.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-sb-admin-interface =0.0.0, =0.1.0, =0.1.0, =0.4.0, =0.6.0 Source cves: CVE-2026-54259 Source advisory: OSV:GHSA-H54R-XQ46-QWQM...

CVE-2026-73159

Affected versions of cti-transmute allow a tag's icon value to be stored and later interpolated into HTML through Vue's v-html. The helper mapIcon previously constructed an HTML string directly from the icon value: Because the icon is user-supplied, a crafted value could break out of the intended...

CVE-2026-73159 cti-transmute Stored XSS via Crafted Tag Icon on Admin Triage Interface

Affected versions of cti-transmute allow a tag's icon value to be stored and later interpolated into HTML through Vue's v-html. The helper mapIcon previously constructed an HTML string directly from the icon value: Because the icon is user-supplied, a crafted value could break out of the intended...

CVE-2026-73159: Improper Neutralization of Input During Web Page Generation

Affected versions of cti-transmute allow a tag's icon value to be stored and later interpolated into HTML through Vue's v-html. The helper mapIcon previously constructed an HTML string directly from the icon value: Because the icon is user-supplied, a crafted value could break out of the intended...

EUVD-2026-53892

Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field = 6.1.1 versions...

Malicious code in react-fontawesome-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4706d295cdd6ae07918ab25d54475d97d88e92c8ba2d3923078ba916096b4366 The default-exported React component in [email protected] performs an unconditional axios GET to http://command.control on every render a...

Malicious Package

Overview react-fontawesome-icons is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

MAL-2026-11093 Malicious code in @heartlandone-private/fontawesome-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc8f9f53c05ecc2642ce82c3841e046025662c206f002b4c6da11ff0cbc763d The package's postinstall lifecycle hook runs node index.js, which issues an HTTPS GET to a hardcoded Burp Collaborator subdomain at...

Malicious code in @heartlandone-private/fontawesome-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc8f9f53c05ecc2642ce82c3841e046025662c206f002b4c6da11ff0cbc763d The package's postinstall lifecycle hook runs node index.js, which issues an HTTPS GET to a hardcoded Burp Collaborator subdomain at...

wagtail-sb-admin-interface (>=0.0.0, <=0.5.0), wagtail-sb-codefield (>=0.1.0, <=0.3.0) +2 more potentially affected by CVE-2026-54262 via wagtail (5.0.0rc1)

wagtail PYPI version 5.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-sb-admin-interface =0.0.0, =0.1.0, =0.1.0, =0.4.0, =0.6.0 Source cves: CVE-2026-54262 Source advisory: OSV:PYSEC-2026-615...

wagtail-sb-admin-interface (>=0.6.0, <=0.7.0), wagtail-sb-codefield (0.4.0) +4 more potentially affected by CVE-2026-54262 via wagtail (6.0.0rc1)

wagtail PYPI version 6.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-sb-admin-interface =0.6.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-54262 Source advisory: OSV:PYSEC-2026-615...

wagtail-sb-admin-interface (>=0.6.0, <=0.7.0), wagtail-sb-codefield (0.4.0) +4 more potentially affected by CVE-2026-54259 via wagtail (6.0.0rc1)

wagtail PYPI version 6.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-sb-admin-interface =0.6.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-54259 Source advisory: OSV:PYSEC-2026-612...