CVE-2026-104847: Improper Neutralization of Input During Web Page Generation

ProseMirror's view component renders and manages the editable browser interface for ProseMirror documents. Prior to 1.42.3, prosemirror-view paste handling accepts attacker-provided HTML whose clipboard slice context contains attributes that are not passed through schema attribute validation. Whe...

PT-2026-104395

Name of the Vulnerable Software and Affected Versions prosemirror-view versions prior to 1.42.3 Description The view component, which manages the editable browser interface for documents, contains a flaw in its paste handling. It accepts attacker-provided HTML where the clipboard slice context...

CVE-2026-102514

Out-of-bounds Write CWE-787 in the PEA archive extraction routine pea.pas, unpeaprocedure of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who convinces a victim to open or extract a crafted .pea archive to execute arbitrary code as the user running PeaZip. While...

CVE-2026-93832

A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps...

EUVD-2026-91054

Out-of-bounds Write CWE-787 in the PEA archive extraction routine pea.pas, unpeaprocedure of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who convinces a victim to open or extract a crafted .pea archive to execute arbitrary code as the user running PeaZip. While...

CVE-2026-102514

PeaZip 11.2.0 and earlier versions are vulnerable to an Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component. The vulnerability occurs during PCOMPRESS1 stream decompression, where the 32-bit compsize field of the first bl...

CVE-2026-93832

A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps...

EUVD-2026-91031

A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps...

CVE-2026-95341

An improper input validation flaw was found in the Desktop component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/523719002...

CVE-2026-95326

An incomplete cleanup flaw was found in the Bluetooth component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533041383...

CVE-2026-95370

An inappropriate implementation flaw was found in the NFC component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517417437...

CVE-2026-95318

A buffer overflow flaw was found in the Video component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556576976...

homeassistant-stubs (2023.10.5), pytest-homeassistant-custom-component (0.13.68) potentially affected by CVE-2025-62172 +1 more via homeassistant (2023.10.5)

homeassistant PYPI version 2023.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.10.5 - pytest-homeassistant-custom-component 0.13.68 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2023.12.0b4), pytest-homeassistant-custom-component (0.13.81) potentially affected by CVE-2025-62172 +1 more via homeassistant (2023.12.0b4)

homeassistant PYPI version 2023.12.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.12.0b4 - pytest-homeassistant-custom-component 0.13.81 Source cves: CVE-2025-62172, CVE-2026-91130 Sour...

homeassistant-stubs (2023.5.0b5), pytest-homeassistant-custom-component (0.13.25) potentially affected by CVE-2025-62172 +1 more via homeassistant (2023.5.0b5)

homeassistant PYPI version 2023.5.0b5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.5.0b5 - pytest-homeassistant-custom-component 0.13.25 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2022.4.0b4), pytest-homeassistant-custom-component (0.8.4) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.4.0b4)

homeassistant PYPI version 2022.4.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.4.0b4 - pytest-homeassistant-custom-component 0.8.4 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2022.6.4), pytest-homeassistant-custom-component (0.9.14) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.6.4)

homeassistant PYPI version 2022.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.6.4 - pytest-homeassistant-custom-component 0.9.14 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2023.2.0b9), pytest-homeassistant-custom-component (0.12.51) potentially affected by CVE-2025-62172 +1 more via homeassistant (2023.2.0b9)

homeassistant PYPI version 2023.2.0b9 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.2.0b9 - pytest-homeassistant-custom-component 0.12.51 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2022.4.0b1), pytest-homeassistant-custom-component (0.8.1) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.4.0b1)

homeassistant PYPI version 2022.4.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.4.0b1 - pytest-homeassistant-custom-component 0.8.1 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2022.2.0b3), pytest-homeassistant-custom-component (0.6.2) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.2.0b3)

homeassistant PYPI version 2022.2.0b3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.2.0b3 - pytest-homeassistant-custom-component 0.6.2 Source cves: CVE-2025-62172, CVE-2026-91130 Source...