CVE-2026-3878: Improper Neutralization of Input During Web Page Generation

The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocsoptionsiconsize' parameter in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

WordPress plugin WP Docs 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

PT-2026-33252

The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocs optionsicon size' parameter in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-lev...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tomcat10: tomcat10-10.1.54-1.hum1 noarch tomcat10-admin-webapps-10.1.54-1.hum1 noarch tomcat10-common-10.1.54-1.hum1 noarch tomcat10-docs-webapp-10.1.54-1.hum1 noarch...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: tigera-operator, envoy-gateway, cilium-cli, flux, harbor, zot, chart-testing, trivy, zarf, cerbos, consul-k8s, helm-set-status, cert-manager-cmctl, tw, istio, helm-docs, pluto, kuma, kubescape, linkerd2, helm, helm-mapkubeapis, kube-arangodb, kots,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: tigera-operator, envoy-gateway, cilium-cli, flux, harbor, zot, chart-testing, trivy, zarf, cerbos, consul-k8s, helm-set-status, cert-manager-cmctl, tw, istio, helm-docs, pluto, kuma, kubescape, linkerd2, helm, helm-mapkubeapis, kube-arangodb, kots,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: consul-k8s, envoy-gateway, gitlab-operator-fips, linkerd2, kube-arangodb, harbor-fips, headlamp-fips, jfrog-cli, nova, k8ssandra-client, k9s, flux-fips, pluto-fips, cert-manager-cmctl-fips, helm-docs, chaos-mesh, headlamp, kubescape-server-fips, trivy-operator-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: envoy-gateway, controller-gen, crossplane-provider-aws-sns-fips, cluster-api-ipam-provider-in-cluster, kubernetes-event-exporter-fips, step-kms-plugin, prometheus-elasticsearch-exporter, chaos-mesh, plugin-barman-cloud, aws-flb-cloudwatch-fips, cue-fips, kubectx, kpt...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter, apache-beam-python-3.12-sdk, kyverno, kiali-fips, crossplane-provider-aws-cloudformation-fips, gitlab-workhorse-ce-fips, nri-haproxy-fips, agentbeat-fips, amazon-ssm-agent, configmap-reload, karpenter-fips, mods, gitleaks, gobuster,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs20: nodejs20-20.20.0-7.1.hum1 aarch64, x8664 nodejs20-bin-20.20.0-7.1.hum1 noarch nodejs20-devel-20.20.0-7.1.hum1 aarch64, x8664 nodejs20-docs-20.20.0-7.1.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.9.3 release.

Red Hat Developer Hub 1.9.3 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs24: nodejs24-24.14.1-4.hum1 aarch64, x8664 nodejs24-bin-24.14.1-4.hum1 noarch nodejs24-devel-24.14.1-4.hum1 aarch64, x8664 nodejs24-docs-24.14.1-4.hum1 noarch...

[SECURITY] Fedora 44 Update: python3.12-3.12.13-2.fc44

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.8.5 release.

Red Hat Developer Hub 1.8.5 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

CVE-2026-5007

A vulnerability was identified in kazuph mcp-docs-rag up to 0.5.0. Affected is the function cloneRepository of the file src/index.ts of the component addgitrepository/addtextfile. The manipulation leads to os command injection. The attack needs to be performed locally. The exploit is publicly...

[SECURITY] Fedora 43 Update: python3.11-3.11.15-2.fc43

Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...

[SECURITY] Fedora 44 Update: python3.11-3.11.15-2.fc44

Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...

[SECURITY] Fedora 44 Update: python3.13-3.13.12-2.fc44

Python 3.13 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.13 package provides the "python3.13" executable:...

CVE-2026-5007

A vulnerability was identified in kazuph mcp-docs-rag up to 0.5.0. Affected is the function cloneRepository of the file src/index.ts of the component addgitrepository/addtextfile. The manipulation leads to os command injection. The attack needs to be performed locally. The exploit is publicly...

CVE-2026-5007 kazuph mcp-docs-rag add_git_repository/add_text_file index.ts cloneRepository os command injection

A vulnerability was identified in kazuph mcp-docs-rag up to 0.5.0. Affected is the function cloneRepository of the file src/index.ts of the component addgitrepository/addtextfile. The manipulation leads to os command injection. The attack needs to be performed locally. The exploit is publicly...