PYSEC-2026-1914 Sentry vulnerable to stored Cross-Site Scripting (XSS)

Impact An unsanitized payload sent by an Integration platform integration allows the storage of arbitrary HTML tags on the Sentry side. This payload could subsequently be rendered on the Issues page, creating a Stored Cross-Site Scripting XSS vulnerability. This vulnerability might lead to the...

PYSEC-2026-1361 OpaMiddleware does not filter HTTP OPTIONS requests

Summary HTTP OPTIONS requests are always allowed by OpaMiddleware, even when they lack authentication, and are passed through directly to the application. The maintainer uncertain whether this should be classed as a "bug" or "security issue" – but is erring on the side of "security issue" as an...

PYSEC-2026-1764 pdoc embeds link to malicious CDN if math mode is enabled

Impact Documentation generated with pdoc --math linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. Users who produce documentation with math mode should update immediately. All other users are unaffected. Patches This issue has been fixed...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.23 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.23 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

CVE-2026-10659

The Dhara flash translation layer disk driver drivers/disk/ftldhara.c implemented the dharanand callbacks so that, on a flash error, the error code was written unconditionally through the caller-supplied dharaerrort err pointer e.g. err = DHARAEECC in dharanandread, and similar in...

MAL-2026-7391 Malicious code in rewactjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zwagq (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-9476 Malicious code in wprwn4xyz (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wgsfmore63 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wbotmwoy27a3 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wandscal (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wandhgx (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tryf2zz (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in swlicap7a (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in swc421 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sprox-c160-1fossil (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in slx55008 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in slnsq09 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in skytestpluginsdf (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in rxsouthjan (RubyGems)

--- -= Per source details. Do not edit below this line.=-...