CVE-2026-56366: Missing Release of Memory after Effective Lifetime

ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion...

CVE-2026-56366: Missing Release of Memory after Effective Lifetime

ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion...

EulerOS 2.0 SP12 : golang (EulerOS-SA-2026-2591)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv...

CVE-2026-9701

The Eventer plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 4.4.2. The plugin stores a plaintext copy of the password reset key in the eventerverificationcode user meta field when a user requests a password reset. The plaintext key...

CVE-2026-9701

The Eventer plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 4.4.2. The plugin stores a plaintext copy of the password reset key in the eventerverificationcode user meta field when a user requests a password reset. The plaintext key...

PT-2026-56314

Name of the Vulnerable Software and Affected Versions Eventer versions prior to 4.4.3 Description The plugin implements an insecure password reset mechanism. When a password reset is requested, a plaintext copy of the reset key is stored in the eventer verification code user meta field within the...

Raw Formatter [Meta Tag Formatter] - Critical - Unsupported - SA-CONTRIB-2026-077

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

Exploit for CVE-2026-12277

CVE-2026-12277 Frontend File Manager Plugin WordPress...

GO-2026-5853 Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio

Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio...

ambition-edc (>=0.2.8, <=0.3.28), meta-edc (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2024-40647 via sentry-sdk (0.9.0)

sentry-sdk PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - ambition-edc =0.2.8, =0.1.0, =0.1.0a23, =2.0.0b6 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

Malicious code in meta-templates (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7319 Malicious code in meta-templates (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tmp-meta-testabc123 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8995 Malicious code in tmp-meta-testabc123 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

ambition-edc (>=0.2.8, <=0.3.28), meta-edc (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2023-28117 via sentry-sdk (0.9.0)

sentry-sdk PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - ambition-edc =0.2.8, =0.1.0, =0.1.0a23, =2.0.0b6 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...

[SECURITY] Fedora 43 Update: kernel-7.1.3-100.fc43

The kernel meta package...

[SECURITY] Fedora 44 Update: kernel-7.1.3-200.fc44

The kernel meta package...

Choose your WhatsApp username carefully

Dutch consumer organization Consumentenbond has warned users to be careful when choosing their optional WhatsApp username. Meta announced the introduction of usernames on June 29, 2026, and encouraged users to reserve their username now. Meta offers this feature as: “a major privacy feature...

OPENSUSE-SU-2026:21225-1 Security update for rmt-server

This update for rmt-server fixes the following issue Update to 3.0.0: - CVE-2026-42256: net-imap: hostile server can perform a DoS on client authenticating a connection with SCRAM-SHA1 or SCRAM-SHA2 bsc1265369. Changes for rmt-server: - Version 3.0.0 Security fix: Remove unused...

CVE-2026-4804

The Zakra theme for WordPress is vulnerable to Stored Cross-Site Scripting via post meta values in all versions up to, and including, 4.2.0. This is due to the theme registering three post meta fields zakramenuitemcolor, zakramenuitemhovercolor, and zakramenuitemactivecolor with 'showinrest' = tr...