CVE-2026-100260

In JetBrains YouTrack versions prior to 2026.2.18991 , a vulnerability exists in the mailbox integration that allowed authentication to persist or occur after a password reset . The vulnerability carries a CVSS 3.1 score of 5.3 (Medium) , indicating a network-based attack vector with low complexi...

CVE-2026-96816

Unauthenticated Cross Site Scripting XSS in Trusted Shops Easy Integration for WooCommerce = 2.0.6 versions...

EUVD-2026-89869

Unauthenticated Cross Site Scripting XSS in Trusted Shops Easy Integration for WooCommerce = 2.0.6 versions...

CVE-2026-96816 WordPress Trusted Shops Easy Integration for WooCommerce plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Trusted Shops Easy Integration for WooCommerce = 2.0.6 versions...

CVE-2026-96816

The Trusted Shops Easy Integration for WooCommerce WordPress plugin (versions

CVE-2026-96816 WordPress Trusted Shops Easy Integration for WooCommerce plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Trusted Shops Easy Integration for WooCommerce = 2.0.6 versions...

AA Discord Audit

aa-discord-audit Reconciliation audit for Alliance Auth's Discord integration. Compares the actual role assignments in the configured Discord guild against the state expressed in Alliance Auth Groups + State per user and closes the gap through which moderators can hand-assign AA-named roles to...

CVE-2026-100260: Initialization of a Resource with an Insecure Default

In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...

PT-2026-103307

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.18991 Description Mailbox integration allows authentication to persist or be performed after a password reset has occurred. Recommendations Update to version 2026.2.18991...

CVE-2026-96816: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Trusted Shops Easy Integration for WooCommerce = 2.0.6 versions...

CVE-2026-100279: Server-Side Request Forgery (SSRF)

In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials...

CVE-2026-100270: Incorrect Authorization

In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integration credentials via import configurations...

PT-2026-103326

🚨 CVE-2026-100279 In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials 🎖@cveNotify...

GHSA-9QH4-3JW8-366W Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions

Impact A could enable Node.js integration in its Web Workers even when its embedder had Node.js integration disabled, giving guest content more privilege than the embedder allowed. Apps are only affected if they enable the tag and the embedder is unsandboxed. Apps that do not use , or that keep t...

NPM: Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions

NPM: Electron: can enable Node.js integration in Web Workers despite embedder restrictions vulnerability discovered by ? in WordPress Npm electron versions 41.10.6...

Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions

Impact A could enable Node.js integration in its Web Workers even when its embedder had Node.js integration disabled, giving guest content more privilege than the embedder allowed. Apps are only affected if they enable the tag and the embedder is unsandboxed. Apps that do not use , or that keep t...

CVE-2026-102676 Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an Electron guest could enable nodeIntegrationInWorker for its Web Workers even when the unsandboxed embedder had Node.js integration...

CVE-2026-102676 Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an Electron guest could enable nodeIntegrationInWorker for its Web Workers even when the unsandboxed embedder had Node.js integration...

CVE-2026-100286

Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated non-administrative user to disclose integration secrets via a crafted API request...

CVE-2026-100286

The Devolutions Server (version 2026.3.5.0 and earlier) is affected by a missing authorization vulnerability in the data source settings API . This flaw allows an authenticated non-administrative user to disclose integration secrets by sending a crafted API request. Exploitation details are not p...