PT-2026-120812

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse repeatedly slices and rejoins every path prefix in lib/compiler.js while processing long dotted keys, table headers, array-of-tables headers, and inline-table keys in assign, deepRef, and setNestedKey. The resultin...

PT-2026-120909

This module allows you to define custom attributes for a block. You can specify an attribute name to be added to the block in a predefined format. The module does not sufficiently sanitize attributes against cross site scripting. This issue is mitigated by the fact that the attacker must have the...

PT-2026-120192

Trigger.dev before 4.7.0 contains a missing authorization vulnerability that allows holders of unrestricted environment API keys to block runs they do not own by supplying a foreign parentRunId to batch-creation endpoints. Attackers can send requests to POST /api/v3/batches or POST...

Block Attributes - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-232

This module allows you to define custom attributes for a block. You can specify an attribute name to be added to the block in a predefined format. The module does not sufficiently sanitize attributes against cross site scripting. This issue is mitigated by the fact that the attacker must have the...

PT-2026-120488

In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-expired user messages for other projects included in the...

PT-2026-120466

The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit the targeted object before updating its title and excerpt, allowing users with the Editor role and above to modify arbitrary posts of any type, including content they cannot otherwise edit such as...

PT-2026-120194

Trigger.dev before 4.6.0 contains a missing authorization vulnerability in the waitpoint token wait endpoint that allows authenticated attackers to block runs belonging to other organizations. Attackers holding any secret API key can supply a victim run ID with their own waitpoint, causing that r...

CVE-2026-113730

The OGNL (Object Graph Navigation Library for Java) library versions prior to 3.4.13 are vulnerable to a stricter-invocation block list bypass . The root cause is that OgnlRuntime.invokeMethod fails to block java.lang.reflect.Method, java.lang.reflect.Constructor, or java.lang.reflect.Field. This...

CVE-2026-113730 OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies

OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, the optional stricter-invocation mode in OgnlRuntime.invokeMethod checks the declaring class of the method that OGNL invokes but does not block java.lang.reflect.Method, java.lang.reflect.Constructor, or java.lang.reflect.Field...

CVE-2026-113730 OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies

OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, the optional stricter-invocation mode in OgnlRuntime.invokeMethod checks the declaring class of the method that OGNL invokes but does not block java.lang.reflect.Method, java.lang.reflect.Constructor, or java.lang.reflect.Field...

CVE-2026-113730 OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies

OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, the optional stricter-invocation mode in OgnlRuntime.invokeMethod checks the declaring class of the method that OGNL invokes but does not block java.lang.reflect.Method, java.lang.reflect.Constructor, or java.lang.reflect.Field...

CVE-2026-93856

A flaw was found in OpenStack Cinder. An authenticated user with project-level access can retrieve messages intended for other projects by issuing a message listing request to the Block Storage API. This flaw leads to information disclosure, exposing resource identifiers and status messages...

CVE-2026-113608

The Configurable Reports block for Moodle (moodle-block_configurablereports) versions prior to 5.3.1 is vulnerable to an SQL injection in the report_sql::prepare_sql() function. The flaw is triggered via the filter_var request parameter within viewreport.php. Low-privileged users authorized to vi...

CVE-2026-113608 Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter_var

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...

CVE-2026-113608 Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter_var

Configurable Reports block for Moodle moodle-blockconfigurablereports before 5.3.1 contains an sql injection vulnerability in reportsql::preparesql via the filtervar request parameter of viewreport.php. Low-privileged users permitted to view reports using the %%FILTERVAR%% placeholder can inject...

EUVD-2026-105150

The Module Manager's block-pool create dispatcher proved that two ALIGNTYPE words of the extra-parameter array a memory-protected module supplies lay inside the module's data, and then used indices 0 through 3 of that array. One of the two unproved words is read by the dispatcher's own buffer...

CVE-2026-94202

The Module Manager in ThreadX contains an out-of-bounds read vulnerability within the _txm_module_manager_tx_block_pool_create_dispatch function, located in common_modules/module_manager/inc/txm_module_manager_dispatch.h. The issue arises because the block-pool create dispatcher fails to properly...

CVE-2026-94202 Module block-pool create validates two of the four parameter words it reads

The Module Manager's block-pool create dispatcher proved that two ALIGNTYPE words of the extra-parameter array a memory-protected module supplies lay inside the module's data, and then used indices 0 through 3 of that array. One of the two unproved words is read by the dispatcher's own buffer...

CVE-2026-90396

A flaw was found in the Linux kernel's block direct I/O DIO subsystem. When an integrity mapping fails during direct I/O operations, a reference to the direct I/O resource is not properly released. This resource leak could potentially be exploited by a local attacker, leading to a denial of servi...

CVE-2026-92483

A flaw was found in the Linux kernel's liveupdate component. When a retrieval attempt for a File List Block FLB fails, the system does not record this failure. Consequently, if a user attempts to retrieve another file associated with the same FLB, the system may retry the failed retrieval. This...