PT-2026-134439

Name of the Vulnerable Software and Affected Versions PDF Invoices & Packing Slips for WooCommerce versions prior to 5.16.5 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts through...

PT-2026-134227

Name of the Vulnerable Software and Affected Versions LightSAML versions prior to 4.7.1 LightSAML versions prior to 5.0.1 Description LightSAML and xmlseclibs have a discrepancy regarding which assertion an inbound SAML signature covers. The Response::deserialize function uses manyElementsFromXml...

PT-2026-134489

Name of the Vulnerable Software and Affected Versions SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications versions prior to 3.10.3 Description An arbitrary file upload issue exists in the handle upload function. The flaw stems from a missing server-side file key...

PT-2026-133281

The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post capability check on the ajaxUpdateProducts function in versions up to, and including, 12.0.0. The handler verifies a static nonce 'contentegg metabox' and the generic 'edit posts'...

PT-2026-134171

Name of the Vulnerable Software and Affected Versions PinePods versions prior to 0.9.0 Description An authenticated user can trigger server-side requests to internal loopback, private-network, and cloud metadata services. This occurs when the system processes an attacker-controlled RSS feed via t...

PT-2026-134194

Name of the Vulnerable Software and Affected Versions Metalama versions 2023.0.101-rc through 2025.1.17 Metalama versions 2026.0.x through 2026.0.24 Metalama versions 2026.1.0 through 2026.1.18 Metalama + PostSharp extension versions 2024.1 through 2026.1.4 Metalama extension affected versions no...

CVE-2026-115456

A flaw was found in gcc. An attacker could cause a Denial of Service DoS by passing a string that is not null-terminated to the std::fromchars function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, potentially leading to invalid data parsing or a...

PT-2026-133523

Name of the Vulnerable Software and Affected Versions HTTP::Parser::XS versions prior to 0.18 Description An issue exists in the parse http request function where the XS parser URL-decodes the request path and measures the result using strlen. This causes the PATH INFO variable to be truncated at...

AlmaLinux 9.2 [TuxCare] Security Update: ansible-core / ansible-test (ALMALINUX9.2:CLSA-2026:1793373763)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793373763 advisory. - A flaw was found in ansible-core. The extractcollectionfromgit function in ansible-core's concreteartifactmanager.py constructs git clone...

AdminNeo: version-cache array injection causes persistent denial of service

AdminNeo v5.4.1 gets the latest version from GitHub API in a browser JavaScript function. Version number is then sent by POST request to ?script=version. This endpoint lacks origin validation and accepts POST data from any source. An attacker can POST version parameter which PHP converts to an...

OpenWRT uhttpd input validation error vulnerability

OpenWRT uhttpd contains an input validation error vulnerability. This vulnerability arises because the uhubusdatasend function in ubus.c fails to synchronize the HTTP request boundaries when multiple TCP segments of the JSON request body arrive for POST /ubus. As a result, the remaining...

PT-2026-134196

Name of the Vulnerable Software and Affected Versions Tesseract versions prior to 5.5.4 Description The ReadAdaptedClass function in src/classify/adaptive.cpp reads an ADAPT CLASS STRUCT from a pre-adapted-template .a file without neutralizing TempProtos and Config pointer fields before any...

MONAI Project code injection vulnerability

Project MONAI: Versions prior to MONAI 1.6.0 and 1.6.1 contain a code injection vulnerability. This vulnerability stems from improper handling by the auto3dseg algofromjson function of algoobject.json located in a specially crafted working directory, as well as malicious algorithmtemplates module...

Gravity Forms deserialization injection vulnerability

Gravity Forms versions 3.1.2 and earlier contain a deserialization injection vulnerability. This vulnerability arises because GFFormsModel::createpost passes submission values to WordPress’s global maybeunserialize function instead of using the plugin-validated GFCommon::maybeunserialize. As a...

WordPress Page and Post Restriction authorization issue vulnerability

WordPress Page and Post Restriction versions 1.6.1 and earlier contain an authorization vulnerability. This vulnerability arises because the paprrestrictpagepostrestapi function fails to validate a REST nonce when processing GET or HEAD REST requests. It then re-authenticates the current user via...

GNU GCC buffer error vulnerability

GNU GCC contains a buffer error vulnerability. This vulnerability arises when a string that does not end with a null character is passed to the std::fromchars function in the libstdc++ library, causing an out-of-bounds read of an allocated buffer. This may result in denial of service, invalid dat...

Chamilo 3 deserialization injection vulnerability

Versions prior to Chamilo 3 2.0.1 contain a deserialization injection vulnerability. This vulnerability arises because public/main/inc/lib/career.lib.php and public/main/cron/importcsv.php fail to utilize the allowedclasses: false security option when invoking PHP’s native unserialize function on...

FlowiseAI Flowise permission and access control issue vulnerability

FlowiseAI Flowise versions 3.1.4 and earlier contain a vulnerability related to permission escalation and access control. This vulnerability stems from a sandbox escape issue: attackers can submit JavaScript to /api/v1/node-custom-function, then write files to the mammoth package via LocalFileSto...

PT-2026-134216

In Trail of Bits fickling through 0.1.12, a pickle STACK GLOBAL operand carrying a dotted qualname for example "Values.read file" is resolved by pickle's find class through getattribute to an arbitrary attribute path rather than to a module-level function. Fickling records only the leading...

Juspay Technologies Composable Open-Source Payments Infrastructure input validation error vulnerability

Versions prior to 1.128.0 and 2026.10.01.0 of Juspay Technologies’ Composable Open-Source Payments Infrastructure contain an input validation error vulnerability. This vulnerability arises because the verifywebhooksource function within the Worldpayxml connector always returns true without...