2974 matches found
WordPress FiboSearch plugin <= 1.33.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FiboSearch versions = 1.33.0...
CLSA-2026-1785917668 TuxCare security update for 36 packages (3 CVEs)
TuxCare rebuilt 36 packages to address 3 CVEs. Fixed in 7.0.109-tuxcare.4...
CVE-2026-71206
Shiori's CheckToken function internal/domains/auth.go validates only the JWT's HMAC signature and returns the embedded claims.Account object unmodified, never re-fetching the account from the database. No session store or token-revocation mechanism exists in the codebase. Deleting an account or...
Non-constant time webhook bearer token comparison in webhook-secret-credentials-provider
webhook-secret-credentials-provider 16.v0cfaf0215cf5 and earlier does not use a constant-time comparison function when checking whether the provided and expected webhook bearer token are equal. This could potentially allow attackers to use statistical methods to obtain a valid webhook bearer toke...
CLSA-2026-1785117186 TuxCare security update for org.bouncycastle (1 CVE)
TuxCare rebuilt 38 org.bouncycastle packages to address 1 CVE. Fixed in 1.77-tuxcare.1...
CLSA-2026-1784769579 TuxCare security update for org.apache.logging.log4j (1 CVE)
TuxCare rebuilt 32 org.apache.logging.log4j packages to address 1 CVE. Fixed in 2.17.1-tuxcare.3...
CLSA-2026-1784682930 TuxCare security update for 36 packages (1 CVE)
TuxCare rebuilt 36 packages to address 1 CVE. Fixed in 7.0.109-tuxcare.3...
CLSA-2026-1784250513 TuxCare security update for 38 packages (1 CVE)
TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.50-tuxcare.12...
CLSA-2026-1783472552 TuxCare security update for 38 packages (4 CVEs)
TuxCare rebuilt 38 packages to address 4 CVEs. Fixed in 9.0.50-tuxcare.11...
CLSA-2026-1783472555 TuxCare security update for 33 packages (3 CVEs)
TuxCare rebuilt 33 packages to address 3 CVEs. Fixed in 7.16.3-tuxcare.1...
CLSA-2026-1783040469 TuxCare security update for 36 packages (1 CVE)
TuxCare rebuilt 36 packages to address 1 CVE. Fixed in 7.0.109-tuxcare.2...
CLSA-2026-1782781173 TuxCare security update for org.apache.struts (3 CVEs)
TuxCare rebuilt 35 org.apache.struts packages to address 3 CVEs. Fixed in 2.5.33-tuxcare.2...
CLSA-2026-1781744120 TuxCare security update for 38 packages (1 CVE)
TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.90-tuxcare.8...
CLSA-2026-1778633134 TuxCare security update for 35 packages (1 CVE)
TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.10...
CLSA-2026-1778546710 TuxCare security update for 36 packages (1 CVE)
TuxCare rebuilt 36 packages to address 1 CVE. Fixed in 7.0.109-tuxcare.1...
CLSA-2026-1777941828 TuxCare security update for 38 packages (2 CVEs)
TuxCare rebuilt 38 packages to address 2 CVEs. Fixed in 9.0.90-tuxcare.7...
CLSA-2026-1776991059 TuxCare security update for org.apache.logging.log4j (2 CVEs)
TuxCare rebuilt 33 org.apache.logging.log4j packages to address 2 CVEs. Fixed in 2.17.2-tuxcare.1...
CLSA-2026-1777250312 TuxCare security update for 39 packages (1 CVE)
TuxCare rebuilt 39 packages to address 1 CVE. Fixed in 10.1.18-tuxcare.5...