Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1

cert-manager Operator for Red Hat OpenShift 1.20.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Exploit for CRLF Injection in Comfy Comfyui-Manager

CVE-2026-22777 — ComfyUI-Manager CRLF Injection → RCE with CV...

WordPress YITH WooCommerce Tab Manager plugin <= 2.15.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Seongwon LEE in WordPress Plugin YITH WooCommerce Tab Manager versions = 2.15.0...

ROOT-APP-NPM-CVE-2022-24772 CVE-2022-24772 in node-forge - Patched by Root

Root has patched CVE-2022-24772 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-12816 CVE-2025-12816 in node-forge - Patched by Root

Root has patched CVE-2025-12816 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44575 CVE-2026-44575 in next - Patched by Root

Root has patched CVE-2026-44575 in the next package for Root:npm. Multiple fixed versions available...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1

cert-manager Operator for Red Hat OpenShift 1.20.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

CVE-2026-88828

The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its user blocking on every authentication path, allowing the holder of an account the site owner has blocked to keep authenticating with that account's privileges, without the block being enforced or...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1

cert-manager Operator for Red Hat OpenShift 1.20.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.20.1

cert-manager Operator for Red Hat OpenShift 1.20.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

CVE-2026-88828 Blacklist Manager for WooCommerce 1.3.0 - 2.3.1 - Blocked User Restriction Bypass via XML-RPC and Application Passwords

The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its user blocking on every authentication path, allowing the holder of an account the site owner has blocked to keep authenticating with that account's privileges, without the block being enforced or...

CVE-2026-88828

The Blacklist Manager for WooCommerce WordPress plugin, affecting versions 1.3.0 through 2.3.1 , contains a vulnerability where user blocking is not enforced across all authentication paths. Specifically, an account blocked by a site owner can continue to authenticate and maintain account privile...

CVE-2026-88828 Blacklist Manager for WooCommerce 1.3.0 - 2.3.1 - Blocked User Restriction Bypass via XML-RPC and Application Passwords

The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its user blocking on every authentication path, allowing the holder of an account the site owner has blocked to keep authenticating with that account's privileges, without the block being enforced or...

EUVD-2026-88100

The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its user blocking on every authentication path, allowing the holder of an account the site owner has blocked to keep authenticating with that account's privileges, without the block being enforced or...

[SECURITY] Fedora 45 Update: dnf5-5.4.6.0-2.fc45

DNF5 is a command-line package manager that automates the process of installi ng, upgrading, configuring, and removing computer programs in a consistent manner. It supports RPM packages, modulemd modules, and comps groups & environments...

[SECURITY] Fedora 45 Update: nemo-6.7.8^unstable-1.fc45

Nemo is the file manager and graphical shell for the Cinnamon desktop that makes it easy to manage your files and the rest of your system. It allows to browse directories on local and remote filesystems, preview files and launch applications associated with them. It is also responsible for handli...

[SECURITY] Fedora 45 Update: muffin-6.7.8^unstable-1.fc45

Muffin is a window and compositing manager that displays and manages your desktop via OpenGL. Muffin combines a sophisticated display engine using the Clutter toolkit with solid window-management logic inherited from the Metacity window manager. Muffin is very extensible via plugins, which are us...

CVE-2026-88808: Execution with Unnecessary Privileges

A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin credentials instead of the ServiceAccount pinned to the deployment. It affects multi-tenancy environments where different tenants share the same...

CVE-2026-88828: Authentication Bypass Using an Alternate Path or Channel

The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its user blocking on every authentication path, allowing the holder of an account the site owner has blocked to keep authenticating with that account's privileges, without the block being enforced or...

PT-2026-99775

Name of the Vulnerable Software and Affected Versions Blacklist Manager for WooCommerce WordPress plugin versions 1.3.0 through 2.3.1 Description The plugin fails to enforce user blocking across all authentication paths. This allows users who have been blocked by the site owner to continue...