CVE-2026-58011 affecting package glib for versions less than 2.78.6-10

CVE-2026-58011 affecting package glib for versions less than 2.78.6-10. A patched version of the package is available...

CVE-2026-58010 affecting package glib for versions less than 2.78.6-10

CVE-2026-58010 affecting package glib for versions less than 2.78.6-10. A patched version of the package is available...

tamilai (0.0.2) potentially affected by CVE-2026-61426 via praisonai (1.7.1)

praisonai NPM version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on praisonai and may be impacted: - tamilai 0.0.2 Source cves: CVE-2026-61426 Source advisory: SNYK:JS-PRAISONAI-17950764...

Unchecked Return Value

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

@openinc/parse-server-opendash (>=4.0.0, <=4.1.2) potentially affected by CVE-2026-61448 via parse-server (>=9.6.0-alpha.37, <=9.9.1-alpha.13)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.1.2 Source cves: CVE-2026-61448 Source advisory: SNYK:JS-PARSESERVER-17950968...

Unchecked Return Value

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

RHSA-2026:38090 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:38017 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

GHSA-FXHP-MV3V-67QP vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, cloudbeat, ratify-fips, zot, kubescape-server-fips, flux-source-controller, helm-diff-fips, kgateway, zarf-fips, gogatekeeper, drone, k8ssandra-client-fips, kubescape-server, helm-operator-fips, grafana-operator-fips, headlamp, jfrog-cli,...

GHSA-FXHP-MV3V-67QP vulnerabilities

Vulnerabilities for packages: argocd-image-updater, vcluster, zarf, conftest, gatekeeper, headlamp, falcoctl, consul-k8s, trivy, zot, steampipe, ratify, chartmuseum, rancher-agent, flux-source-controller, cilium-cli, kyverno, rancher-fleet, gogatekeeper, tigera-operator, opa, helm, trivy-operator...

CVE-2026-15335

The Booking Package plugin for WordPress is vulnerable to generic SQL Injection via 'email' Form Parameter form in all versions up to, and including, 1.7.20 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

EUVD-2026-43143

The Booking Package plugin for WordPress is vulnerable to generic SQL Injection via 'email' Form Parameter form in all versions up to, and including, 1.7.20 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2026-15335

The Booking Package WordPress plugin is vulnerable up to version 1.7.20 due to insufficient escaping on the email parameter in the REST endpoint /wp-json/booking-package/v1/request, allowing unauthenticated SQL injection. Root cause: user-supplied email input reaches the SQL sink without proper e...

CVE-2026-15335 Booking Package <= 1.7.20 - Unauthenticated SQL Injection via 'email' Form Parameter

The Booking Package plugin for WordPress is vulnerable to generic SQL Injection via 'email' Form Parameter form in all versions up to, and including, 1.7.20 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

GHSA-FRRJ-87JH-2772 vulnerabilities

Vulnerabilities for packages: cilium-cli, kube-vip...

GHSA-2WC2-FM75-P42X vulnerabilities

Vulnerabilities for packages: open-webui, kubeflow-pipelines-visualization-server, datadog-agent...

[SECURITY] Fedora 44 Update: sssd-2.13.1-2.fc44

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...

MAL-2026-10185 Malicious code in authvaultx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c707d53e30a333f8b8cf03ac2480eee3e2fa9c3c3164b1a100d333c91f9f3a On require of authvaultx main: auth.js, which loads lib/writer.js, top-level code attempts to load the separately published npm package...

Malicious code in authvaultx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c707d53e30a333f8b8cf03ac2480eee3e2fa9c3c3164b1a100d333c91f9f3a On require of authvaultx main: auth.js, which loads lib/writer.js, top-level code attempts to load the separately published npm package...

PT-2026-57393

Name of the Vulnerable Software and Affected Versions Booking Package versions prior to 1.7.21 Description Insufficient escaping of user-supplied parameters and lack of preparation in SQL queries allow unauthenticated attackers to perform SQL Injection. This occurs via the email parameter in the...