CVE-2026-19711

The Premium Packages WordPress plugin before 7.0.7 does not validate a withdrawal request against the requesting user's actual earned balance, allowing any authenticated user, including a subscriber with no sales at all, to submit a payout request for an arbitrary amount, which an administrator m...

EUVD-2026-59914

The Premium Packages WordPress plugin before 7.0.7 does not validate a withdrawal request against the requesting user's actual earned balance, allowing any authenticated user, including a subscriber with no sales at all, to submit a payout request for an arbitrary amount, which an administrator m...

CVE-2026-19711 Premium Packages – Sell Digital Products Securely < 7.0.7 - Subscriber+ Arbitrary Amount Withdrawal Request

The Premium Packages WordPress plugin before 7.0.7 does not validate a withdrawal request against the requesting user's actual earned balance, allowing any authenticated user, including a subscriber with no sales at all, to submit a payout request for an arbitrary amount, which an administrator m...

RHSA-2026:55142 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:54869 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

GHSA-48P8-G2FX-3WWM vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-fips, kubeflow-pipelines, kubeflow-pipelines-driver-fips...

GO-2026-6218 vulnerabilities

Vulnerabilities for packages: ko-fips, crossplane-provider-aws-cur-fips, cue, seaweedfs-operator, cilium-cli, crossplane-provider-aws-kinesis, peerdb-flow-fips, k8sgateway, ip-masq-agent, nova, haproxy-ingress-fips, crossplane-provider-gcp-beta-compute, dataplaneapi, gitlab-operator-fips,...

RHSA-2026:54534 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:54520 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:54518 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

GO-2025-4082 vulnerabilities

Vulnerabilities for packages: consul-fips, consul...

GO-2026-6007 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, gitlab-operator-fips, gitlab-operator, datadog-agent-fips, tigera-operator, datadog-agent...

GO-2026-4770 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, opencost-fips, ferretdb, livekit-cli, glab, opencost, flux-operator, jaeger-fips, datadog-agent-fips, osv-scanner, flux-operator-fips, jaeger, datadog-agent...

GO-2026-5052 vulnerabilities

Vulnerabilities for packages: x509-certificate-exporter, grafana-fips, crossplane-provider-azure-portal, goreleaser, crossplane-provider-azure-relay, crossplane-provider-azure-operationsmanagement, crossplane-provider-azure-signalrservice, external-secrets-fips, commercial-grafana,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kots, grafana-mimir, prometheus, opa-fips, external-secrets-fips, cilium-cli, ferretdb, kube-rbac-proxy, pulumi-language-dotnet, zot, tflint, rqlite, hubble-ui, dbmate, opentelemetry-collector-fips, spire-server-fips, zarf, gomplate, certificate-transparency,...

GO-2026-5061 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator, seaweedfs-fips, bento-fips, seaweedfs-rocksdb-fips, gitea, bento, ollama, kubescape-server, gitlab-workhorse-ce, seaweedfs-rocksdb, mailpit, kubescape, seaweedfs, pdfcpu, seaweedfs-operator-fips, mailpit-fips, gitea-fips, mattermost, rclone-fips,...

GO-2024-3282 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, step-issuer, cert-exporter-fips, aws-privateca-issuer-fips, cert-manager-webhook-pdns-fips, step-issuer-fips, cert-exporter, cert-manager-webhook-pdns, cert-manager-cmctl-fips, cert-manager-istio-csr, aws-privateca-issuer...

GO-2025-4096 vulnerabilities

Vulnerabilities for packages: buildah, node-feature-discovery-fips, grafana-alloy, eks-distro-fips, rke2-runtime, virt-handler, rancher, cluster-autoscaler, kubernetes-fips, cluster-autoscaler-fips, sriov-network-device-plugin-fips, kubernetes, azure-container-networking, grafana-alloy-fips,...

GO-2026-5224 vulnerabilities

Vulnerabilities for packages: azure-service-operator, authentik, rancher, vault-fips, cloudbeat, cloudbeat-fips, rancher-agent, vault, authentik-fips, azure-service-operator-fips...

GO-2024-2883 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, rekor-fips, argo-cd, prometheus-alertmanager, cortex, timestamp-authority-fips, rekor, grafana-mimir, timestamp-authority, fulcio-fips, cortex-fips, fulcio...