com.github.jknack:handlebars-guava-cache (1.1.1), com.github.jknack:handlebars-humanize (1.1.1) +6 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (1.1.1)

com.github.jknack:handlebars MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-guava-cache 1.1.1 - com.github.jknack:handlebars-humanize 1.1.1 -...

com.github.jknack:handlebars-guava-cache (2.3.0), com.github.jknack:handlebars-helpers (2.3.0) +11 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (2.3.0)

com.github.jknack:handlebars MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-guava-cache 2.3.0 - com.github.jknack:handlebars-helpers 2.3.0 -...

com.github.jknack:handlebars-guava-cache (2.3.1), com.github.jknack:handlebars-helpers (2.3.1) +8 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (2.3.1)

com.github.jknack:handlebars MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-guava-cache 2.3.1 - com.github.jknack:handlebars-helpers 2.3.1 -...

com.github.jknack:handlebars-jackson2 (0.4.0), com.github.jknack:handlebars-json (0.4.0) +2 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (0.4.0)

com.github.jknack:handlebars MAVEN version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-jackson2 0.4.0 - com.github.jknack:handlebars-json 0.4.0 -...

com.github.jknack:handlebars-humanize (0.5.0), com.github.jknack:handlebars-jackson2 (0.5.0) +3 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (0.5.0)

com.github.jknack:handlebars MAVEN version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-humanize 0.5.0 - com.github.jknack:handlebars-jackson2 0.5.0 -...

com.github.jknack:handlebars-humanize (0.6.0), com.github.jknack:handlebars-jackson2 (0.6.0) +3 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (0.6.0)

com.github.jknack:handlebars MAVEN version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-humanize 0.6.0 - com.github.jknack:handlebars-jackson2 0.6.0 -...

com.github.jknack:handlebars-humanize (0.6.1), com.github.jknack:handlebars-jackson2 (0.6.1) +4 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (0.6.1)

com.github.jknack:handlebars MAVEN version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-humanize 0.6.1 - com.github.jknack:handlebars-jackson2 0.6.1 -...

com.github.jknack:handlebars-humanize (0.6.2), com.github.jknack:handlebars-jackson2 (0.6.2) +3 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (0.6.2)

com.github.jknack:handlebars MAVEN version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-humanize 0.6.2 - com.github.jknack:handlebars-jackson2 0.6.2 -...

com.github.jknack:handlebars-humanize (0.7.0), com.github.jknack:handlebars-jackson2 (0.7.0) +3 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (0.7.0)

com.github.jknack:handlebars MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-humanize 0.7.0 - com.github.jknack:handlebars-jackson2 0.7.0 -...

com.github.jknack:handlebars-guava-cache (1.1.0), com.github.jknack:handlebars-humanize (1.1.0) +6 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (1.1.0)

com.github.jknack:handlebars MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-guava-cache 1.1.0 - com.github.jknack:handlebars-humanize 1.1.0 -...

com.github.jknack:handlebars-guava-cache (1.2.0), com.github.jknack:handlebars-helpers (1.2.0) +6 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (1.2.0)

com.github.jknack:handlebars MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-guava-cache 1.2.0 - com.github.jknack:handlebars-helpers 1.2.0 -...

com.github.jknack:handlebars-jackson2 (0.4.2), com.github.jknack:handlebars-json (0.4.2) +2 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (0.4.2)

com.github.jknack:handlebars MAVEN version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-jackson2 0.4.2 - com.github.jknack:handlebars-json 0.4.2 -...

com.github.jknack:handlebars-humanize (0.5.2), com.github.jknack:handlebars-jackson2 (0.5.2) +3 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (0.5.2)

com.github.jknack:handlebars MAVEN version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-humanize 0.5.2 - com.github.jknack:handlebars-jackson2 0.5.2 -...

LangChain4j: SQL injection via metadata filters in langchain4j-mariadb and langchain4j-pgvector

Summary The MariaDB and pgvector embedding stores build metadata-filter SQL by string-concatenating filter keys and, in MariaDB, string values directly into the query without adequate escaping. A crafted metadata key in EmbeddingSearchRequest.filter can break out of its SQL context and inject...

DRUPAL-CONTRIB-2026-048

The Formatter Field module provides a mechanism for specifying a formatter and formatter settings to be used for displaying a field, on a per-entity basis. formatterfield stores some data as PHP-serialized strings. In some situations, malicious data can be written directly to the field. This can...

GHSA-R989-7G3J-WJHW NocoDB: Refresh Tokens Persist Through Password Recovery

Summary A stolen refresh token survived a password-forgot flow and could be used to mint fresh JWTs even after the user reset their password. Details passwordChange and passwordReset deleted the user's refresh tokens, but passwordForgot only rotated tokenversion and revoked OAuth tokens — it did...

NocoDB: Refresh Tokens Persist Through Password Recovery

Summary A stolen refresh token survived a password-forgot flow and could be used to mint fresh JWTs even after the user reset their password. Details passwordChange and passwordReset deleted the user's refresh tokens, but passwordForgot only rotated tokenversion and revoked OAuth tokens — it did...

GHSA-R95R-RJ6R-C39X Pi Agent: Race condition in Pi auth.json writes could expose stored credentials

Pi auth.json writes could briefly expose stored credentials to local users Pi stored API keys and OAuth credentials in auth.json. A race condition in the file write path could briefly create or rewrite this file with permissions derived from the process umask before tightening the file to...

CVE-2026-48781

Postiz is an AI social media scheduling tool. In versions prior to 2.21.8, the Skool integration callback signed an attacker-controlled JSON blob into a session-shape JWT using the application's JWTSECRET, and the auth middleware trusted every claim in that JWT without re-resolving the user from...

RLSA-2026:26206 Important: fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Token...