FastAPI Admin 访问控制错误漏洞

FastAPI Admin is an open-source management dashboard based on FastAPI and TortoiseORM. Versions of FastAPI Admin 2.2.0 and earlier contained a access control vulnerability. This vulnerability stemmed from incorrect operations on the resetapidocs function in the component’s Custom Documentation...

[SECURITY] Fedora 43 Update: python3.13-3.13.12-1.fc43

Python 3.13 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.13 package provides the "python3.13" executable:...

[SECURITY] Fedora 42 Update: python3.14-3.14.3-1.fc42

Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.14 package provides the "python3.14" executable:...

CVE-2026-24990

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

CVE-2026-24990

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

CVE-2026-24990

CVE-2026-24990 affects the WordPress WP Docs plugin up to version 2.2.8. The issue is a missing authorization due to incorrectly configured access control levels, enabling bounded actions to be performed without proper permissions. Affected component: Fahad Mahmood WP Docs wp-docs (plugin). Impac...

CVE-2026-24990 WordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

CVE-2026-24990

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

CVE-2026-24990 WordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

EUVD-2026-5250

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

PT-2026-6236

Name of the Vulnerable Software and Affected Versions Fahad Mahmood WP Docs versions through 2.2.8 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Update...

WordPress plugin WP Docs 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

CVE-2026-24990: Missing Authorization

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: sonobuoy, fuse-overlayfs-snapshotter, mc, mattermost, crossplane-provider-aws-kinesis, spegel, yunikorn-k8shim, step, octo-sts, wgcf, docker-credential-ecr-login, whereabouts, timescaledb-parallel-copy, flux-image-automation-controller, rancher-telemetry,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: mc, spegel, yunikorn-k8shim, docker-credential-ecr-login, timescaledb-parallel-copy, linkerd2-proxy-init, sbomqs, newrelic-fluent-bit-output, crossplane-provider-aws-lambda, k3s, podinfo, lvm-driver, wazero, opencost, aws-signer-notation-plugin,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: mc, spegel, yunikorn-k8shim, docker-credential-ecr-login, timescaledb-parallel-copy, linkerd2-proxy-init, sbomqs, newrelic-fluent-bit-output, crossplane-provider-aws-lambda, k3s, podinfo, lvm-driver, wazero, opencost, aws-signer-notation-plugin,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: sonobuoy, fuse-overlayfs-snapshotter, mc, mattermost, crossplane-provider-aws-kinesis, spegel, yunikorn-k8shim, step, octo-sts, wgcf, docker-credential-ecr-login, whereabouts, timescaledb-parallel-copy, flux-image-automation-controller, rancher-telemetry,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: mc, spegel, yunikorn-k8shim, docker-credential-ecr-login, timescaledb-parallel-copy, linkerd2-proxy-init, sbomqs, newrelic-fluent-bit-output, crossplane-provider-aws-lambda, k3s, podinfo, lvm-driver, wazero, opencost, aws-signer-notation-plugin,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: sonobuoy, fuse-overlayfs-snapshotter, mc, mattermost, crossplane-provider-aws-kinesis, spegel, yunikorn-k8shim, step, octo-sts, wgcf, docker-credential-ecr-login, whereabouts, timescaledb-parallel-copy, flux-image-automation-controller, rancher-telemetry,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: mc, spegel, yunikorn-k8shim, docker-credential-ecr-login, timescaledb-parallel-copy, linkerd2-proxy-init, sbomqs, newrelic-fluent-bit-output, crossplane-provider-aws-lambda, k3s, podinfo, lvm-driver, wazero, opencost, aws-signer-notation-plugin,...