Cross-site Scripting (XSS)

Overview @highcharts/grid-lite is a Highcharts Grid Lite framework Affected versions of this package are vulnerable to Cross-site Scripting XSS via the createSvgFromDefinition function in ts/Grid/Core/UI/SvgIcons.ts, where SVG path element attributes are set directly from user-supplied Grid icon...

Prototype Pollution

Overview @highcharts/dashboards is a Highcharts Dashboards framework Affected versions of this package are vulnerable to Prototype Pollution via table IDs in DataCursor and DataTableCore, where attacker-controlled table IDs such as proto or constructor are used as keys in plain object maps withou...

CVE-2026-118245

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards uses chartConstructor as an unchecked property lookup in the Highcharts namespace and invokes the selected member with the component container and chartOptions. An attacker who controls...

CVE-2026-110181

PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-standard function bodies. PostgreSQL analyses such functions at declaration time, while Anonymizer only attempts to check them at execution time. This problem can be exploited by any user with the...

CVE-2026-110182

PostgreSQL Anonymizer contains a vulnerability related to the anon.partial and anon.partialemail functions. These function can reveal the while data if the data is small enough. The issue is fixed in PostgreSQL Anonymizer 3.3.0 and later versions...

CVE-2026-105614

PostgreSQL Anonymizer's anon.imageblur function doesn't check the declared dimension of the provided image, allowing an attacker to provide a small image with enormous declared dimensions. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on,...

Authlib: Is_secure_transport() Loopback Exemption Can Be Bypassed With A Userinfo Component, Allowing Cleartext-HTTP URL

Summary "authlib.common.security.issecuretransport" is used throughout Authlib to enforce the OAuth 2.0 / OIDC requirement that endpoint and redirect URIs use TLS, with an RFC 8252 §7.3 exemption for loopback "http://" URIs. The check is implemented as a textual "str.startswith" prefix match, so ...

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in late 2023, Silent Train uses rotating chains of compromised...

MLflow CrewAI Autologging Records LLM Provider API Keys In Logged Trace Spans

Summary "mlflow.crewai.autolog" leaks CrewAI LLM provider API keys into MLflow trace telemetry. When a CrewAI "Agent" is instrumented with MLflow autologging, MLflow serializes the agent's "dict" and converts its fields to strings. The "llm" field contains the CrewAI LLM object, whose string...

EUVD-2026-112308

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards uses chartConstructor as an unchecked property lookup in the Highcharts namespace and invokes the selected member with the component container and chartOptions. An attacker who controls...

CVE-2026-118245 Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards uses chartConstructor as an unchecked property lookup in the Highcharts namespace and invokes the selected member with the component container and chartOptions. An attacker who controls...

CVE-2026-118245

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards uses chartConstructor as an unchecked property lookup in the Highcharts namespace and invokes the selected member with the component container and chartOptions. An attacker who controls...

CVE-2026-118245 Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards uses chartConstructor as an unchecked property lookup in the Highcharts namespace and invokes the selected member with the component container and chartOptions. An attacker who controls...

CVE-2026-118245

In Highcharts Dashboards (versions 1.0.0 through 4.2.2), an unchecked property lookup for chartConstructor in the Highcharts namespace allows for Cross-Site Scripting (XSS) . An attacker controlling the dashboard configuration can select a public utility function instead of a supported chart cons...

CVE-2026-118245 Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards uses chartConstructor as an unchecked property lookup in the Highcharts namespace and invokes the selected member with the component container and chartOptions. An attacker who controls...

SUSE CVE-2026-99018

In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIGSHADOWCALLSTACK, handleexception reloads the kernel shadow call stack pointer gp only when the trap came from userspace. It made that decision with...

SUSE CVE-2026-99107

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix incorrect MFT record pointer passed to ntfsattrrecordresize ntfsnewattrflags passes the wrong MFT record to ntfsattrrecordresize. When the attribute is in an extent record, ctx-mrec points to the extent but the function...

SUSE CVE-2026-99125

In the Linux kernel, the following vulnerability has been resolved: s390/pai: Handle multiple PMU stop callback invocations Handle the following scenario: The kernel protects itself against a very high sampling load and throttles the sampling using: perfeventthrottle -- PMU-stop Shortly later the...

SUSE CVE-2026-99126

In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Prevent XID null dereference The mpcvalidatexid function sets grp-savedxid2-xid2flag2 to 0x40 to signal XID validation error. If peer XID is NULL or r/w channel pairing mismatch happens, grp-savedxid2 is never...

SUSE CVE-2026-99138

In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free in dotcpgetsockoptTCPCCINFO dotcpgetsockopt reads icsk-icskcaops and dereferences the getinfo function pointer without rcureadlock. With BPF structops congestion control, caops can point to dynamically...