44389 matches found
Security Bulletin: Remote Code Execution via Code Validation Endpoint
Summary A remote code execution vulnerability existed in the code validation endpoint where authenticated users could execute arbitrary code with server privileges. The vulnerability occurred because the validation process compiled and executed user-submitted code, including function...
@conform-to/react (>=1.8.0, <=1.19.3), @conform-to/valibot (>=1.8.0, <=1.19.3) +4 more potentially affected by CVE-2026-49250 via @conform-to/dom (>=1.8.0, <=1.19.3)
@conform-to/dom NPM version =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.17.1-depup.0, =1.17.1-depup.0, =1.18.0-depup.0 Source cves: CVE-2026-49250 Source advisory: SNYK:JS-CONFORMTODOM-17812748...
@conform-to/react (>=1.8.0, <=1.19.3), @conform-to/valibot (>=1.8.0, <=1.19.3) +4 more potentially affected by CVE-2026-49250 via @conform-to/dom (>=1.8.0, <=1.19.3)
@conform-to/dom NPM version =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.8.0, =1.17.1-depup.0, =1.17.1-depup.0, =1.18.0-depup.0 Source cves: CVE-2026-49250 Source advisory: OSV:GHSA-525M-7F82-2MF7...
GHSA-93Q6-WWJH-JC6H @asymmetric-effort/specifyjs: CSS expression sanitization is bypassable in renderToString
Finding Location: core/src/server/render-to-string.ts:307-311 CSS value sanitization stripped expression and urljavascript: using simple regex, but could be bypassed with CSS unicode escapes \65xpression, null bytes, or CSS comments exp//ression. Mitigating Factor: These CSS injection vectors onl...
Cross-site Scripting (XSS)
Overview @asymmetric-effort/specifyjs is an A declarative TypeScript UI framework built for performance and simplicity Affected versions of this package are vulnerable to Cross-site Scripting XSS in the renderToString process. An attacker can inject malicious CSS expressions by bypassing the...
@asymmetric-effort/specifyjs: CSS expression sanitization is bypassable in renderToString
Finding Location: core/src/server/render-to-string.ts:307-311 CSS value sanitization stripped expression and urljavascript: using simple regex, but could be bypassed with CSS unicode escapes \65xpression, null bytes, or CSS comments exp//ression. Mitigating Factor: These CSS injection vectors onl...
Craft CMS: Authorization bypass in `entries/move-to-section` via missing target-section save check
Summary The EntriesController::actionMoveToSection endpoint checks only whether the current user can view the destination section, but it does not require permission to save entries into that section. A low-privileged authenticated control-panel user who can move an entry out of its current secti...
Access Control Bypass
Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Access Control Bypass via the entries/move-to-section process. An attacker can relocate entries into unauthorized sections by exploiting insufficient permission checks, allowing them to bypas...
GHSA-43CQ-C2GQ-PFPW Craft CMS: Authorization bypass in `entries/move-to-section` via missing target-section save check
Summary The EntriesController::actionMoveToSection endpoint checks only whether the current user can view the destination section, but it does not require permission to save entries into that section. A low-privileged authenticated control-panel user who can move an entry out of its current secti...
NPM: OpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checks
NPM: OpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checks vulnerability discovered by ? in WordPress Npm openclaw versions = 2026.4.26...
NPM: OpenClaw: Shell wrapper argv could change between approval and execution
NPM: OpenClaw: Shell wrapper argv could change between approval and execution vulnerability discovered by ? in WordPress Npm openclaw versions = 2026.5.16...
GHSA-XWW8-GQVH-92X9 OpenClaw: Exec approval display truncation could hide the command being approved
Summary OpenClaw exec approvals could show a shortened command in the approval UI while keeping the full original command for execution. For very long commands, an approver could see and approve a benign-looking prefix while a hidden suffix remained part of the command that would run after...
WordPress NewsPlus Shortcodes plugin <= 4.2.0 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin NewsPlus Shortcodes versions = 4.2.0...
CVE-2026-55111
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight...
Out-of-bounds Read in OpenCV
OpenCV Open Source Computer Vision Library through 3.3 corresponding to OpenCV-Python 3.3.0.9 has an out-of-bounds read error in the function icvCvtBGRA2BGR8uC4C3R when reading an image file by using cv::imread...
PYSEC-2026-710 Out-of-bounds Read in OpenCV
OpenCV Open Source Computer Vision Library through 3.3 corresponding to OpenCV-Python 3.3.0.9 has an out-of-bounds read error in the function icvCvtBGRA2BGR8uC4C3R when reading an image file by using cv::imread...
CVE-2026-55153
A flaw was found in mchange-commons-java, a Java utility library. This vulnerability allows a remote attacker to achieve arbitrary code execution through Java Naming and Directory Interface JNDI injection. The library's JNDI ObjectFactory can construct objects of arbitrary classes and initialize...
CVE-2026-57763
Contributor Cross Site Scripting XSS in Structured Content = 1.7.0 versions...