151360 matches found
PYSEC-2026-1914 Sentry vulnerable to stored Cross-Site Scripting (XSS)
Impact An unsanitized payload sent by an Integration platform integration allows the storage of arbitrary HTML tags on the Sentry side. This payload could subsequently be rendered on the Issues page, creating a Stored Cross-Site Scripting XSS vulnerability. This vulnerability might lead to the...
OpaMiddleware does not filter HTTP OPTIONS requests
SummaryHTTP OPTIONS requests are always allowed by OpaMiddleware, even when they lack authentication, and are passed through directly to the application.The maintainer uncertain whether this should be classed as a "bug" or "security issue" – but is erring on the side of "security issue" as an...
PYSEC-2026-1361 OpaMiddleware does not filter HTTP OPTIONS requests
Summary HTTP OPTIONS requests are always allowed by OpaMiddleware, even when they lack authentication, and are passed through directly to the application. The maintainer uncertain whether this should be classed as a "bug" or "security issue" – but is erring on the side of "security issue" as an...
PYSEC-2026-1764 pdoc embeds link to malicious CDN if math mode is enabled
Impact Documentation generated with pdoc --math linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. Users who produce documentation with math mode should update immediately. All other users are unaffected. Patches This issue has been fixed...
LNbits improperly handles potential network and payment failures when using Eclair backend
SummaryPaying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. DetailsUsing blocking: true on the API call will lead to a timeout error if a payment does not get settled in the 30s...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.23 bug fix and security update
Red Hat OpenShift Container Platform release 4.21.23 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...
CVE-2026-10659
The Dhara flash translation layer disk driver drivers/disk/ftldhara.c implemented the dharanand callbacks so that, on a flash error, the error code was written unconditionally through the caller-supplied dharaerrort err pointer e.g. err = DHARAEECC in dharanandread, and similar in...
Malicious code in wazir-xlocaletstnpm (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7391 Malicious code in rewactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in reatctjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ingularjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in elf-stats-marzipan-saddlebag-291 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in csec-form-helpers (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chai-as-absorbed (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulerjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angubarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ai-devops-helper (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @vwfs-uix/core (npm)
--- -= Per source details. Do not edit below this line.=-...