145557 matches found
PYSEC-2026-1839 pyrage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
pyrage uses the Rust age crate for its underlying operations, and age is vulnerable to GHSA-4fg7-vxc8-qx5w. All details of GHSA-4fg7-vxc8-qx5w are relevant to pyrage for the versions specified in this advisory. See GHSA-4fg7-vxc8-qx5w for full details. Versions of pyrage before 1.2.0 lack plugin...
Synapse allows a a malformed invite to break the invitee's `/sync`
ImpactSynapse versions before 1.120.1 fail to properly validate invites received over federation. This vulnerability allows a malicious server to send a specially crafted invite that disrupts the invited user's /sync functionality. PatchesSynapse 1.120.1 rejects such invalid invites received over...
pdoc embeds link to malicious CDN if math mode is enabled
ImpactDocumentation generated with pdoc --math linked to JavaScript files from polyfill.io.The polyfill.io CDN has been sold and now serves malicious code.Users who produce documentation with math mode should update immediately. All other users are unaffected. PatchesThis issue has been fixed in...
PYSEC-2026-1764 pdoc embeds link to malicious CDN if math mode is enabled
Impact Documentation generated with pdoc --math linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. Users who produce documentation with math mode should update immediately. All other users are unaffected. Patches This issue has been fixed...
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
ImpactA cross-site scripting XSS vulnerability was discovered in TinyMCE’s content parsing code. This allowed specially crafted noscript elements containing malicious code to be executed when that content was loaded into the editor. PatchesThis vulnerability has been patched in TinyMCE 7.2.0,...
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
ImpactA cross-site scripting XSS vulnerability was discovered in TinyMCE’s content extraction code. When using the noneditableregexp option, specially crafted HTML attributes containing malicious code were able to be executed when content was extracted from the editor. PatchesThis vulnerability h...
PYSEC-2026-1302 TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Impact A cross-site scripting XSS vulnerability was discovered in TinyMCE’s content parsing code. This allowed specially crafted noscript elements containing malicious code to be executed when that content was loaded into the editor. Patches This vulnerability has been patched in TinyMCE 7.2.0,...
GHSA-58MJ-CMHG-35RG vulnerabilities
Vulnerabilities for packages: haproxy...
GHSA-5MP8-RQ5M-PJ7M vulnerabilities
Vulnerabilities for packages: haproxy...
CVE-2026-33555 vulnerabilities
Vulnerabilities for packages: haproxy...
GHSA-5MP8-RQ5M-PJ7M vulnerabilities
Vulnerabilities for packages: haproxy...
CVE-2026-40187
creationtimestamp| type| source ---|---|--- 2026-07-07 14:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq2s2h3gp32g 2026-07-07 14:35:10+00:00| published-proof-of-concept| https://github.com/EGroupware/egroupware/security/advisories/GHSA-8737-2x9g-xjj7...
CGA-39G9-9GVP-5X59
Bulletin has no description...
Important: Red Hat Security Advisory: 389-ds:1.4 security update
An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Comm...
MAL-2026-7429 Malicious code in treactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in serverless-twi-testing (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7410 Malicious code in rseactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7367 Malicious code in react-tiny-popover-next (npm)
--- -= Per source details. Do not edit below this line.=-...