[SECURITY] Fedora 43 Update: python3.13-3.13.12-1.fc43

Python 3.13 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.13 package provides the "python3.13" executable:...

[SECURITY] Fedora 42 Update: python3.14-3.14.3-1.fc42

Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.14 package provides the "python3.14" executable:...

CVE-2026-24990

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

CVE-2026-24990

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

CVE-2026-24990 WordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

CVE-2026-24990 WordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

CVE-2026-24990

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

CVE-2026-24990

CVE-2026-24990 affects the WordPress WP Docs plugin up to version 2.2.8. The issue is a missing authorization due to incorrectly configured access control levels, enabling bounded actions to be performed without proper permissions. Affected component: Fahad Mahmood WP Docs wp-docs (plugin). Impac...

EUVD-2026-5250

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

WordPress plugin WP Docs 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

PT-2026-6236

Name of the Vulnerable Software and Affected Versions Fahad Mahmood WP Docs versions through 2.2.8 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Update...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: cosign, kubernetes-csi-external-provisioner, litestream, crossplane-provider-family-aws, paranoia, rancher-helm, goreleaser, docker-credential-ecr-login, minio-operator, k8sgateway, metacontroller, rancher-loglevel, opencost, terraform-docs,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: cosign, kubernetes-csi-external-provisioner, litestream, crossplane-provider-family-aws, paranoia, rancher-helm, goreleaser, docker-credential-ecr-login, minio-operator, k8sgateway, metacontroller, rancher-loglevel, opencost, terraform-docs,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, cosign, actions-runner-controller, hydra, kubernetes-dns-node-cache, kubernetes-csi-external-provisioner, timescaledb-parallel-copy, external-dns, chart-testing, kor, sealed-secrets, swagger, litestream, eksctl,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: cosign, kubernetes-csi-external-provisioner, litestream, crossplane-provider-family-aws, paranoia, rancher-helm, goreleaser, docker-credential-ecr-login, minio-operator, k8sgateway, metacontroller, rancher-loglevel, opencost, terraform-docs,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: cosign, kubernetes-csi-external-provisioner, litestream, crossplane-provider-family-aws, paranoia, rancher-helm, goreleaser, docker-credential-ecr-login, minio-operator, k8sgateway, metacontroller, rancher-loglevel, opencost, terraform-docs,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, cosign, actions-runner-controller, hydra, kubernetes-dns-node-cache, kubernetes-csi-external-provisioner, timescaledb-parallel-copy, external-dns, chart-testing, kor, sealed-secrets, swagger, litestream, ctop, eksctl,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, cosign, actions-runner-controller, hydra, kubernetes-dns-node-cache, kubernetes-csi-external-provisioner, timescaledb-parallel-copy, external-dns, chart-testing, kor, sealed-secrets, swagger, litestream, eksctl,...

Directory Traversal

Overview @backstage/plugin-techdocs-node is a Common node.js functionalities for TechDocs, to be shared between techdocs-backend plugin and techdocs-cli Affected versions of this package are vulnerable to Directory Traversal via the TechdocsGenerator function when processing documentation from...

CVE-2026-25153 @backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks

Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDocs. In versions of @backstage/plugin-techdocs-node prior to 1.13.11 and 1.14.1, when TechDocs is configured with runIn: local, a malicious actor who...