CVE-2026-102983 Astro: Netlify Image CDN allowlist bypass enables SSRF

Astro is a web framework for content-driven websites. From 5.2.0 until 8.2.4, the @astrojs/netlify adapter generates regular expressions for Netlify Image CDN remote-image allowlists without anchoring them to the beginning of the URL. Because Netlify evaluates these expressions with RegExp.test, ...

CVE-2026-102983 Astro: Netlify Image CDN allowlist bypass enables SSRF

Astro is a web framework for content-driven websites. From 5.2.0 until 8.2.4, the @astrojs/netlify adapter generates regular expressions for Netlify Image CDN remote-image allowlists without anchoring them to the beginning of the URL. Because Netlify evaluates these expressions with RegExp.test, ...

CVE-2026-102983

The @astrojs/netlify adapter for the Astro web framework (versions 5.2.0 through 8.2.4) is vulnerable to Server-Side Request Forgery (SSRF) . The root cause is that generated regular expressions for Netlify Image CDN remote-image allowlists lack anchoring to the beginning of the URL. This allows ...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: lvm2: device-mapper-1.02.217-1.hum1 aarch64, x8664 device-mapper-devel-1.02.217-1.hum1 aarch64, x8664 device-mapper-event-1.02.217-1.hum1 aarch64, x8664 device-mapper-event-devel-1.02.217-1.hum1...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.0.3 (cuda)

Red Hat AI Base Images 3.0.3 cuda is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.0.3 (spyre)

Red Hat AI Base Images 3.0.3 spyre is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.0.3 (cpu)

Red Hat AI Base Images 3.0.3 cpu is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.0.3 (tpu)

Red Hat AI Base Images 3.0.3 tpu is now available. Red Hat® AI Base Images...

AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said. Its researchers found more than 13,000 internal images from developers at over 300 organizations, including customer billing records a...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs24: nodejs24-24.21.0-1.1.hum1 aarch64, x8664 nodejs24-bin-24.21.0-1.1.hum1 noarch nodejs24-devel-24.21.0-1.1.hum1 aarch64, x8664 nodejs24-docs-24.21.0-1.1.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs22: nodejs22-22.23.3-2.3.2.1.hum1 aarch64, x8664 nodejs22-bin-22.23.3-2.3.2.1.hum1 noarch nodejs22-devel-22.23.3-2.3.2.1.hum1 aarch64, x8664 nodejs22-docs-22.23.3-2.3.2.1.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.0.3 (rocm)

Red Hat AI Base Images 3.0.3 rocm is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs26: nodejs26-26.10.0-0.2.hum1 aarch64, x8664 nodejs26-bin-26.10.0-0.2.hum1 noarch nodejs26-devel-26.10.0-0.2.hum1 aarch64, x8664 nodejs26-docs-26.10.0-0.2.hum1 noarch...

CVE-2026-6170

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'images' parameter of the plugin's btbbcssimagegrid shortcode in all versions up to, and including, 5.7.2 due to insufficient input sanitization and output escaping on user-supplied attributes. This...

EUVD-2026-89670

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'images' parameter of the plugin's btbbcssimagegrid shortcode in all versions up to, and including, 5.7.2 due to insufficient input sanitization and output escaping on user-supplied attributes. This...

CVE-2026-6170 Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode Attribute

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'images' parameter of the plugin's btbbcssimagegrid shortcode in all versions up to, and including, 5.7.2 due to insufficient input sanitization and output escaping on user-supplied attributes. This...

CVE-2026-6170 Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode Attribute

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'images' parameter of the plugin's btbbcssimagegrid shortcode in all versions up to, and including, 5.7.2 due to insufficient input sanitization and output escaping on user-supplied attributes. This...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.6-0.5.hum1 aarch64, x8664 grafana13.1-13.1.6-0.5.hum1.src src Security Fixes: grafana13.1: CVE-2026-93981...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.10-0.10.hum1 aarch64, x8664 grafana12.4-12.4.10-0.10.hum1.src src Security Fixes: grafana12.4: CVE-2026-93981...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: gcc13: gcc13-13.5.0-0.2.hum1 aarch64, x8664 gcc13-c++-13.5.0-0.2.hum1 aarch64, x8664 gcc13-gfortran-13.5.0-0.2.hum1 aarch64, x8664 gcc13-plugin-annobin-13.5.0-0.2.hum1 aarch64, x8664...