WordPress CDI <5.1.9 - Cross Site Scripting

WordPress CDI plugin prior to 5.1.9 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape a parameter before outputting it back in the response of an AJAX action. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the...

GO-2026-6686 vulnerabilities

Vulnerabilities for packages: chaos-mesh, docker, gosu, umoci, k3d, eks-distro-fips, cloudbeat, crossplane-function-kcl-fips, cloudbeat-fips, ctop-fips, dagger, eks-distro, envoy-gateway-fips, containerd, gosu-fips, kubevirt-cdi-importer-fips, runc-fips, rancher-agent, google-osconfig-agent,...

com.github.athieriot:jtaches (>=1.2, <=1.3), com.zanox.lib.rabbiteasy:rabbiteasy-cdi (>=1.0.1, <=1.2.0) +13 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (2.8.7)

com.rabbitmq:amqp-client MAVEN version 2.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.athieriot:jtaches =1.2, =1.0.1, =1.0.1, =1.0.1, =0.5.0-m1, =0.5.0-m1, =0.5.0-m1, =0.5.0-m1, =0.5.0-m...

cn.net.vidyo:jsmth-data (3.3.120.release), cn.net.vidyo:jsmth-msg (3.3.120.release) +6 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (2.8.2)

com.rabbitmq:amqp-client MAVEN version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - cn.net.vidyo:jsmth-data 3.3.120.release - cn.net.vidyo:jsmth-msg 3.3.120.release - cn.net.vidyo:jsmth-orm...

Linux Distros Unpatched Vulnerability : CVE-2026-93316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

com.snowflake:snowflake-maven-plugin (0.1.0), org.liquibase:liquibase-cdi (>=4.19.1, <=4.20.0) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.27)

net.snowflake:snowflake-jdbc MAVEN version 3.13.27 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.snowflake:snowflake-maven-plugin 0.1.0 - org.liquibase:liquibase-cdi =4.19.1, =4.20.0 Source cves...

org.liquibase:liquibase-cdi (>=4.13.0, <=4.14.0), org.liquibase:liquibase-maven-plugin (4.13.0) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.20)

net.snowflake:snowflake-jdbc MAVEN version 3.13.20 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.liquibase:liquibase-cdi =4.13.0, =4.14.0 - org.liquibase:liquibase-maven-plugin 4.13.0 Source cve...

org.apache.hop:hop-transform-snowflake-bulkloader (>=2.2.0, <=2.4.0), org.finos.legend.engine:legend-engine-xt-persistence-component-relational-snowflake (>=release-4.96.3, <=4.141.0) +5 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.19)

net.snowflake:snowflake-jdbc MAVEN version 3.13.19 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.apache.hop:hop-transform-snowflake-bulkloader =2.2.0, =release-4.96.3, =4.141.0 -...

CVE-2026-93316

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

CVE-2026-93316

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

CVE-2026-93316 Starting daemon with --cdi-disabled flag can lead to panic on specific builds

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

CVE-2026-93316 Starting daemon with --cdi-disabled flag can lead to panic on specific builds

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

CVE-2026-93316 Starting daemon with --cdi-disabled flag can lead to panic on specific builds

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

EUVD-2026-92527

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

CVE-2026-93316

The BuildKit daemon is vulnerable to a daemon panic when it is started with the --cdi-disabled flag and subsequently processes builds that attempt to use CDI devices . This issue, categorized as a NULL Pointer Dereference (CWE-476) , can occur either accidentally or maliciously. The impact is a h...

PT-2026-106062

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

CVE-2026-93316: NULL Pointer Dereference

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

cn.net.vidyo:jsmth-data (3.3.120.release), cn.net.vidyo:jsmth-msg (3.3.120.release) +6 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (2.8.2)

com.rabbitmq:amqp-client MAVEN version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - cn.net.vidyo:jsmth-data 3.3.120.release - cn.net.vidyo:jsmth-msg 3.3.120.release - cn.net.vidyo:jsmth-orm...

com.github.athieriot:jtaches (>=1.2, <=1.3), com.zanox.lib.rabbiteasy:rabbiteasy-cdi (>=1.0.1, <=1.2.0) +13 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (2.8.7)

com.rabbitmq:amqp-client MAVEN version 2.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.athieriot:jtaches =1.2, =1.0.1, =1.0.1, =1.0.1, =0.5.0-m1, =0.5.0-m1, =0.5.0-m1, =0.5.0-m1, =0.5.0-m...

cn.net.vidyo:jsmth-data (3.3.120.release), cn.net.vidyo:jsmth-msg (3.3.120.release) +6 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (2.8.2)

com.rabbitmq:amqp-client MAVEN version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - cn.net.vidyo:jsmth-data 3.3.120.release - cn.net.vidyo:jsmth-msg 3.3.120.release - cn.net.vidyo:jsmth-orm...