PT-2026-105490

Summary The openUrl function in @a2ui/web core passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button,...

PT-2026-104395

Name of the Vulnerable Software and Affected Versions prosemirror-view versions prior to 1.42.3 Description The view component, which manages the editable browser interface for documents, contains a flaw in its paste handling. It accepts attacker-provided HTML where the clipboard slice context...

CVE-2026-102514

Out-of-bounds Write CWE-787 in the PEA archive extraction routine pea.pas, unpeaprocedure of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who convinces a victim to open or extract a crafted .pea archive to execute arbitrary code as the user running PeaZip. While...

CVE-2026-93832

A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps...

EUVD-2026-91054

Out-of-bounds Write CWE-787 in the PEA archive extraction routine pea.pas, unpeaprocedure of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who convinces a victim to open or extract a crafted .pea archive to execute arbitrary code as the user running PeaZip. While...

CVE-2026-102514

PeaZip 11.2.0 and earlier versions are vulnerable to an Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component. The vulnerability occurs during PCOMPRESS1 stream decompression, where the 32-bit compsize field of the first bl...

EUVD-2026-91031

A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps...

CVE-2026-93832

A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps...

CVE-2026-95341

An improper input validation flaw was found in the Desktop component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/523719002...

CVE-2026-95326

An incomplete cleanup flaw was found in the Bluetooth component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533041383...

CVE-2026-95370

An inappropriate implementation flaw was found in the NFC component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517417437...

CVE-2026-95318

A buffer overflow flaw was found in the Video component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556576976...

homeassistant-stubs (2022.9.0b4), pytest-homeassistant-custom-component (0.11.16) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.9.0b4)

homeassistant PYPI version 2022.9.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.0b4 - pytest-homeassistant-custom-component 0.11.16 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2022.9.0b6), pytest-homeassistant-custom-component (0.11.18) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.9.0b6)

homeassistant PYPI version 2022.9.0b6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.0b6 - pytest-homeassistant-custom-component 0.11.18 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2022.6.0b1), pytest-homeassistant-custom-component (0.9.5) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.6.0b1)

homeassistant PYPI version 2022.6.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.6.0b1 - pytest-homeassistant-custom-component 0.9.5 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2022.8.0b6), pytest-homeassistant-custom-component (0.11.4) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.8.0b6)

homeassistant PYPI version 2022.8.0b6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.8.0b6 - pytest-homeassistant-custom-component 0.11.4 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2023.5.4), pytest-homeassistant-custom-component (0.13.32) potentially affected by CVE-2025-62172 +1 more via homeassistant (2023.5.4)

homeassistant PYPI version 2023.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.5.4 - pytest-homeassistant-custom-component 0.13.32 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2021.4.0b4), pytest-homeassistant-custom-component (0.3.0) potentially affected by CVE-2025-62172 +1 more via homeassistant (2021.4.0b4)

homeassistant PYPI version 2021.4.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.4.0b4 - pytest-homeassistant-custom-component 0.3.0 Source cves: CVE-2025-62172, CVE-2026-91130 Source...

homeassistant-stubs (2023.12.0b2), pytest-homeassistant-custom-component (0.13.80) potentially affected by CVE-2025-62172 +1 more via homeassistant (2023.12.0b2)

homeassistant PYPI version 2023.12.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.12.0b2 - pytest-homeassistant-custom-component 0.13.80 Source cves: CVE-2025-62172, CVE-2026-91130 Sour...

homeassistant-stubs (2022.2.0), pytest-homeassistant-custom-component (0.6.6) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.2.0)

homeassistant PYPI version 2022.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.2.0 - pytest-homeassistant-custom-component 0.6.6 Source cves: CVE-2025-62172, CVE-2026-91130 Source...