CVE-2026-5162

The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Instagram Feed widget's 'instagramfollowtext' setting in all versions up to, and including, 1.7.1056 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-5162

The CVE-2026-5162 entry concerns the Royal Addons for Elementor plugin (WordPress). It describes a Stored Cross-Site Scripting vulnerability in the Instagram Feed widget, exploitable via the instagram_follow_text setting in all versions up to 1.7.1056 due to insufficient input sanitization and ou...

EUVD-2026-23340

The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Instagram Feed widget's 'instagramfollowtext' setting in all versions up to, and including, 1.7.1056 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-40302: Improper Neutralization of Input During Web Page Generation

zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, the proxyUi template engine uses Go's text/template which performs no HTML escaping instead of html/template. The GitHub OAuth callback handlers in both publicProxy and dynamicProxy embed the...

PT-2026-35599

Summary The text-to-speech generation endpoint POST /api/v1/text-to-speech/generate is whitelisted no auth and accepts a credentialId directly in the request body. When called without a chatflowId, the endpoint uses the provided credentialId to decrypt the stored credential e.g., OpenAI or...

ZROK security vulnerabilities

Zrok is a secure internet sharing tool developed by OpenZiti. Versions of Zrok prior to 2.0.1 contained security vulnerabilities. These vulnerabilities stemmed from the use of the text/template template engine without proper escaping of the refreshInterval parameter, which could lead to cross-sit...

PT-2026-33504

Name of the Vulnerable Software and Affected Versions Dolibarr versions prior to 23.0.0 Description Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. An authenticated administrator can achieve remote code execution as the web server user by...

Anviz CrossChex Standard security vulnerabilities

Anviz CrossChex Standard is a centralized control software developed by Anviz Corporation in the United States, used for access control and attendance data management. Anviz CrossChex Standard has a security vulnerability. This vulnerability arises from the ability of attackers to manipulate the...

[SECURITY] Fedora 44 Update: spacebar-6.6.4-1.fc44

Spacebar is a telepathy-qt based SMS application that primarily targets Plasm a Mobile...

[SECURITY] Fedora 44 Update: kf6-ktextwidgets-6.25.0-1.fc44

KDE Frameworks 6 Tier 3 addon with advanced text edting widgets...

[SECURITY] Fedora 44 Update: kf6-kcoreaddons-6.25.0-1.fc44

KCoreAddons provides classes built on top of QtCore to perform various tasks such as manipulating mime types, autosaving files, creating backup files, generating random sequences, performing text manipulations such as macro replacement, accessing user information and many more...

aa-rag (>=0.1.0, <=0.4.1), aiagents4pharma (>=1.8.2, <=1.22.3) +10 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.5)

langchain-text-splitters PYPI version 0.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - aa-rag =0.1.0, =1.8.2, =1.0.0, =0.0.3, =0.0.2, =25.7.1.0, =0.3.0, =0.7.0, =0.1.1, =0.6.51, =0.0.30, =0.0.33 Sour...

Server-side Request Forgery (SSRF)

Overview langchain-text-splitters is a LangChain text splitting utilities Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the splittextfromurl function. An attacker can access internal network resources and potentially exfiltrate sensitive data by supplying...

agential (>=0.0.4, <=0.2.1), ai-review-assistant (>=0.1.0, <=0.4.0) +225 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.2.4)

langchain-text-splitters PYPI version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - agential =0.0.4, =0.1.0, =0.1.0, =0.0.1, =0.1.3, =0.2.0, =0.0.1, =0.1.4, =0.4.13, =0.9.1 and more Source cves:...

addepar-redflag (>=0.1.0, <=1.2.0), agentbruno (>=0.0.2, <=0.0.5) +181 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.0.2)

langchain-text-splitters PYPI version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - addepar-redflag =0.1.0, =0.0.2, =0.1.0, =0.0.8.dev1, =0.0.1, =0.19.0, =0.1.0, =0.1.0, =0.8.29, =0.0.1, =0.0.1,...

academic-metrics (>=0.1.0b0, <=1.0.99), aiagents4pharma (>=1.0.0, <=1.6.0) +19 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.2)

langchain-text-splitters PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - academic-metrics =0.1.0b0, =1.0.0, =0.1.8, =0.1.2, =0.1.1, =0.1.0, =0.3.1, =0.1.0, =25.3.4.1, =2.11.0, =2.14.1 a...

ai-enterprise-agent (>=0.0.2, <=0.0.9), data-digitization (0.1.0) +20 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.0.1)

langchain-text-splitters PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - ai-enterprise-agent =0.0.2, =0.1.14, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =0.1.3, =0.0.15, =1.0.6, =0.1.0b0, =0.5.0b1...

ano-code (>=0.1.6, <=0.1.11), khoj (>=1.41.1.dev34, <=2.0.0b16.dev0) +1 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.1)

langchain-text-splitters PYPI version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - ano-code =0.1.6, =1.41.1.dev34, =1.21.0, =1.21.1 Source cves: CVE-2026-41481 Source advisory:...

agent-nexus-cli (>=0.1.0, <=0.1.31), agentiva (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-41481 via langchain-text-splitters (>=1.0.0a1, <=1.1.1)

langchain-text-splitters PYPI version =1.0.0a1, =0.1.0, =0.1.0, =3.0.3, =3.1.0, =6.4.21, =0.1.0, =0.1.0, =0.4.0, =0.0.4, =0.8.0, =0.8.15 and more Source cves: CVE-2026-41481 Source advisory: SNYK:PYTHON-LANGCHAINTEXTSPLITTERS-16095053...

agent-nexus-cli (>=0.1.0, <=0.1.31), agentiva (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-41481 via langchain-text-splitters (>=1.0.0a1, <=1.1.1)

langchain-text-splitters PYPI version =1.0.0a1, =0.1.0, =0.1.0, =3.0.3, =3.1.0, =6.4.21, =0.1.0, =0.1.0, =0.4.0, =0.0.4, =0.8.0, =0.8.15 and more Source cves: CVE-2026-41481 Source advisory: OSV:GHSA-FV5P-P927-QMXR...