MINI-RFPC-V9G6-8QHW

Bulletin has no description...

EUVD-2026-51930

Summary...

MINI-2W6V-7GJ3-W696

Bulletin has no description...

MINI-8V73-P45P-GR93

Bulletin has no description...

MINI-MGWR-QR3H-WQ8F

Bulletin has no description...

FreeBSD : py-mkdocs-material -- DOM XSS vulnerability (1976b049-8ccc-11f1-b333-901b0edee044)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1976b049-8ccc-11f1-b333-901b0edee044 advisory. Martin Donath reports: Material for MkDocs 7.2.0 through 9.7.6 contains a DOM-based cross-site scriptin...

CVE-2026-45330

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the identity-document verification admin controllers load pending Authorization records by raw identifier without confirming currentorganization ownership, allowing an...

EUVD-2026-51667

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the identity-document verification admin controllers load pending Authorization records by raw identifier without confirming currentorganization ownership, allowing an...

CVE-2026-65636

Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr Elixir.Ymlr module allows attackers to inject arbitrary content into generated YAML documents through document comments. Ymlr.document!/2 interpolates each caller-supplied comment string into the output behind a single...

Chromium: CVE-2026-17690 Insufficient validation of untrusted input in PDF

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

MINI-43Q9-RG3J-G4VP

Bulletin has no description...

MINI-HJ8H-66VV-7MVJ

Bulletin has no description...

CVE-2026-65636 YAML injection via unescaped newlines in ymlr document comments

Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr Elixir.Ymlr module allows attackers to inject arbitrary content into generated YAML documents through document comments. Ymlr.document!/2 interpolates each caller-supplied comment string into the output behind a single...

CVE-2026-65636 YAML injection via unescaped newlines in ymlr document comments

Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr Elixir.Ymlr module allows attackers to inject arbitrary content into generated YAML documents through document comments. Ymlr.document!/2 interpolates each caller-supplied comment string into the output behind a single...

CVE-2026-65636

Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr Elixir.Ymlr module allows attackers to inject arbitrary content into generated YAML documents through document comments. Ymlr.document!/2 interpolates each caller-supplied comment string into the output behind a single...

CVE-2026-65636

The CVE-2026-65636 issue affects the ymlr library (Elixir.Ymlr) and its document encoding entry points (Ymlr.document!/2, Ymlr.documents!/2, Ymlr.documents/2). An attacker-controlled comment string is interpolated behind a single #, and CRLF sequences terminate the YAML comment, allowing injectio...

MINI-43RQ-R8M9-C9WX

Bulletin has no description...

SUSE CVE-2026-17690

Insufficient validation of untrusted input in PDF in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-17694

Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-65636: Improper Neutralization of CRLF Sequences

Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr Elixir.Ymlr module allows attackers to inject arbitrary content into generated YAML documents through document comments. Ymlr.document!/2 interpolates each caller-supplied comment string into the output behind a single...