CVE-2026-74020

Unauthenticated Broken Access Control in Koji = 2.2.1 versions...

CVE-2026-74020 WordPress Koji theme <= 2.2.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Koji = 2.2.1 versions...

CVE-2026-74020 WordPress Koji theme <= 2.2.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Koji = 2.2.1 versions...

EUVD-2026-63320

Unauthenticated Broken Access Control in Koji = 2.2.1 versions...

CVE-2026-74020

CVE-2026-74020 is an unauthenticated Broken Access Control vulnerability in the WordPress Koji theme , affecting versions ≤ 2.2.1 . The flaw allows a remote, unauthenticated attacker to access restricted resources over the network with low complexity, resulting in a high confidentiality impact (C...

CVE-2026-74020: Missing Authorization

Unauthenticated Broken Access Control in Koji = 2.2.1 versions...

PT-2026-78993

Name of the Vulnerable Software and Affected Versions Koji versions prior to 2.2.2 Description An unauthenticated broken access control issue exists, allowing users to bypass authorization mechanisms without providing valid credentials. Recommendations Update to a version newer than 2.2.1...

WordPress Koji theme <= 2.2.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Theme Koji versions = 2.2.1...

pyp2spec is Vulnerable to Code Injection

Impactpyp2spec was writing PyPI package metadata e.g. the summary field into the generated spec file without escaping RPM macro directives. When a packager then runs rpmbuild, those directives get evaluated, so a malicious package can execute arbitrary commands on the build machine.The macro...

PYSEC-2026-1501 Koji Cross-site Scripting

A vulnerability in Koji was found. An unsanitized input allows for an XSS attack. Javascript code from a malicious link could be reflected in the resulting web page. It is not expected to be able to submit an action or make a change in Koji due to existing XSS protections in the code...

Koji Cross-site Scripting

A vulnerability in Koji was found. An unsanitized input allows for an XSS attack. Javascript code from a malicious link could be reflected in the resulting web page. It is not expected to be able to submit an action or make a change in Koji due to existing XSS protections in the code...

EUVD-2019-0073

Malware in sbrugna...

EUVD-2017-0068

Malware in sbrugna...

EUVD-2018-0085

Malware in sbrugna...

EUVD-2024-3582

Malicious code in bioql PyPI...

EUVD-2022-5709

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2018-1002150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2017-1002153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission. CVE-2017-1002153 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2018-1002161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rebase to Koji 1.16.2 for CVE-2018-1002161 CVE-2018-1002161 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 8090...

Linux Distros Unpatched Vulnerability : CVE-2019-17109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation. CVE-2019-17109 Note that Nessus relies on the presence of the packag...