CLEANSTART-2026-IB33850 Security fixes in crossplane-provider-keycloak-fips 2.21.1-r1

Package crossplane-provider-keycloak-fips version 2.21.1-r1 fixes 2 vulnerabilities: CVE-2026-41178, ghsa-jpcw-4wr7-c3vq...

EUVD-2026-44723

Composer is a dependency Manager for the PHP language. Prior to 1.10.28, 2.2.28, and 2.9.8, Composer\IO\BaseIO::loadConfiguration validates GitHub OAuth tokens with the regex ^.A-Za-z0-9+$ and interpolates rejected tokens into an UnexpectedValueException; GitHub Actions GITHUBTOKEN values using t...

ghs-community.com Improper Access Control vulnerability OBB-3800055

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ghs-werdau.de Improper Access Control vulnerability OBB-3767007

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in ghs-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76032e6dfef4a3b22bbc424659b031d4ecdcd4eb2c4cb325def2142071679bf8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3362 Malicious code in ghs-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76032e6dfef4a3b22bbc424659b031d4ecdcd4eb2c4cb325def2142071679bf8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ghs-portal.gcps1.com XSS vulnerability

Open Bug Bounty ID: OBB-612393 Description| Value ---|--- Affected Website:| ghs-portal.gcps1.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...