253026 matches found
CLSA-2026-1788166978 TuxCare security update for django (6 CVEs)
TuxCare rebuilt django to address 6 CVEs. Fixed in 5.1.10.post3+tuxcare...
CVE-2026-82868 @pdfme/schemas before 5.5.9 Cross-Site Scripting via SVG
@pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin that renders user-supplied SVG content directly to innerHTML without sanitization. Attackers can inject malicious SVG with embedded scripts, event handlers, or foreignObject elements to execute...
CVE-2026-82866 @pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetch
@pdfme/common before 5.5.10 contains a server-side request forgery vulnerability in the getB64BasePdf function that fetches arbitrary URLs without validation when basePdf is attacker-controlled. Attackers who control the basePdf template field can force servers or clients to make requests to...
CVE-2026-82865 pdfme schemas before 5.5.10 Cross-Site Scripting via i18n Label
pdfme schemas before 5.5.10 contains a cross-site scripting vulnerability in the multiVariableText property panel that assigns unsanitized i18n label values to innerHTML. Attackers who control label overrides through options.labels can inject arbitrary JavaScript that executes when users open the...
CVE-2026-82662
Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowing attackers to intercept OAuth2 token requests. Attackers in a machine-in-the-middle position can capture OAuth client secrets, refresh tokens, and access tokens transmitt...
CLSA-2026-1788165805 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 6 CVEs. Fixed in 5.3.31-tuxcare.13...
OPENSUSE-SU-2026:20183-1 Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 144.0.7559.132 boo1257650 CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
ROOT-OS-DEBIAN-11-CVE-2026-73074 CVE-2026-73074 in vim - Patched by Root
Root has patched CVE-2026-73074 in the vim package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-35177 CVE-2026-35177 in vim - Patched by Root
Root has patched CVE-2026-35177 in the vim package for Root:Debian:11. Multiple fixed versions available...
DEBIAN-CVE-2026-82631
A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-on-keys Subsystem. The manipulation results in use after free. The attack may be performed from remote. A high complexit...
CVE-2026-82665 yaojingang GEOFlow Image Library Cleanup ImageLibraryController.php unlink path traversal
A vulnerability was detected in yaojingang GEOFlow up to 2.1.0. This vulnerability affects the function unlink of the file app/Http/Controllers/Admin/ImageLibraryController.php of the component Image Library Cleanup. The manipulation of the argument filepath results in path traversal. The attack...
EUVD-2026-68434
A vulnerability was detected in yaojingang GEOFlow up to 2.1.0. This vulnerability affects the function unlink of the file app/Http/Controllers/Admin/ImageLibraryController.php of the component Image Library Cleanup. The manipulation of the argument filepath results in path traversal. The attack...
CVE-2026-82665
yaojingang GEOFlow (up to 2.1.0) contains a path traversal vulnerability in the Image Library Cleanup component. The flaw resides in the unlink function of app/Http/Controllers/Admin/ImageLibraryController.php, where an attacker who controls the file_path argument can delete files outside the int...
DEBIAN-CVE-2026-82623
A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...
ROOT-OS-DEBIAN-13-CVE-2026-63385 CVE-2026-63385 in libevent - Patched by Root
Root has patched CVE-2026-63385 in the libevent package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-63383 CVE-2026-63383 in libevent - Patched by Root
Root has patched CVE-2026-63383 in the libevent package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-63388 CVE-2026-63388 in libevent - Patched by Root
Root has patched CVE-2026-63388 in the libevent package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-63382 CVE-2026-63382 in libevent - Patched by Root
Root has patched CVE-2026-63382 in the libevent package for Root:Debian:13. Multiple fixed versions available...