GHSA-48X8-Q2FP-CPC8 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-F2VR-9QRM-HV28 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-RH68-CFMC-8XFW vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-C6M6-6997-FXFH vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XXPP-M3M6-M3RM vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-PV98-3M5Q-P66W vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-PMM6-HFR7-6GQF vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-HV8M-GVVC-R98W vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QR77-R8M9-548X vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-G279-57V2-6C9X vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-4R63-54PQ-WF8P vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2FJR-R86H-FPW3 vulnerabilities

Vulnerabilities for packages: chromium...

Stored Cross Site Scripting

showdown is vulnerable to stored cross-site scripting. The vulnerability is due to a failure to properly escape table header ID attributes in the parseHeaders function, where attackers can inject arbitrary HTML and script-executing SVG elements through double-quote characters in markdown table...

GHSA-Q7JX-V53G-848W

creationtimestamp| type| source ---|---|--- 2026-07-10 02:42:38+00:00| seen| https://gist.github.com/alon710/c858490dcced6d8c05b3d0f0cec528f1...

GHSA-9M9W-GXF7-RH8M

creationtimestamp| type| source ---|---|--- 2026-07-10 01:41:47+00:00| seen| https://gist.github.com/alon710/34fe998f34bdbbf866bd428a21589671...

EUVD-2026-42765

A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Affected by this issue is some unknown functionality of the file pkg/channels/mqtt/mqtt.go of the component MQTT Channel Handler. This manipulation of the argument clientid causes incorrect authorization. The attack is possible to be...

CVE-2026-49753

creationtimestamp| type| source ---|---|--- 2026-07-10 00:35:19+00:00| published-proof-of-concept| https://github.com/elixir-mint/mint/security/advisories/GHSA-mjqx-c6f6-7rc2 2026-07-10 03:41:59+00:00| seen| https://gist.github.com/alon710/bc442ee88dc103da228f4212da5b648e...

CVE-2026-55252

creationtimestamp| type| source ---|---|--- 2026-07-10 00:35:12+00:00| published-proof-of-concept| https://github.com/openrundev/openrun/security/advisories/GHSA-h5g6-xmh4-hc37...

EUVD-2026-42758

The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in versions up to, and including, 6.2.3. The vulnerability exists in the loginpressongithublogin function, which blindly trusts the first element profile0'email' of the array returned by...

CVE-2026-12597

The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in versions up to, and including, 6.2.3. The vulnerability exists in the loginpressongithublogin function, which blindly trusts the first element profile0'email' of the array returned by...