CVE-2026-44696

OpenProject is open-source, web-based project management software. Prior to 17.4.0, OpenProject's rich text markdown rendering pipeline uses Sanitize::Config::RELAXED:css for inline style sanitization. This configuration permits essentially all CSS properties in style attributes on permitted HTML...

PT-2020-13917

Name of the Vulnerable Software and Affected Versions Atlassian Jira Service Desk Server and Data Center versions prior to 4.12.0 Description The issue allows remote attackers authenticated as a non-administrator user to view Project Request-Types and Descriptions via an Information Disclosure...

Kickstarter Data Breach Publishes 70,000 Startup Ideas

An application programming interface API error on the popular Kickstarter crowdfunding website exposed the plans and descriptions of more than 70,000 yet-to-be launched projects. The API bug exposed project descriptions, goals, durations, rewards, videos, images, locations, categories, and...