PT-2026-22084

Name of the Vulnerable Software and Affected Versions Drupal Tagify versions prior to 1.2.49 Description The Tagify module for Drupal does not properly sanitize user-provided input before using it in JavaScript templates within the Tagify widget. This allows for the execution of arbitrary...

PT-2026-22086

Name of the Vulnerable Software and Affected Versions Drupal CAPTCHA versions 0.0.0 through 1.16.9 Drupal CAPTCHA versions 2.0.0 through 2.0.9 Description A functionality bypass exists in Drupal CAPTCHA due to insufficient invalidation of security tokens. An attacker may bypass the CAPTCHA on...

PT-2026-22089

Name of the Vulnerable Software and Affected Versions Drupal SAML SSO - Service Provider versions prior to 3.1.3 Description The Drupal SAML SSO - Service Provider module does not properly sanitize user input, leading to a reflected Cross-Site Scripting XSS issue. This allows attackers to inject...

GHSA-3PPC-4F35-3M26 vulnerabilities

Vulnerabilities for packages: py3-captum, wazuh-dashboard-fips, wazuh-dashboard, gemini-cli, kibana, py3-jupyterlab, actions-runner, drupal, tileserver-gl, opensearch-dashboards-fips, langfuse-fips, argo-workflows, saf, code-server, vitess, langfuse, renovate,...

CVE-2026-26996 vulnerabilities

Vulnerabilities for packages: py3-captum, wazuh-dashboard-fips, wazuh-dashboard, gemini-cli, kibana, py3-jupyterlab, actions-runner, drupal, tileserver-gl, opensearch-dashboards-fips, langfuse-fips, argo-workflows, saf, code-server, vitess, langfuse, renovate,...

CVE-2026-26960 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, wazuh-dashboard, kibana, py3-jupyterlab, actions-runner, drupal, lerna, tileserver-gl, opensearch-dashboards-fips, saf, vitess, code-server, pnpm-stage0, gitlab-rails-ce-fips, opensearch-dashboards, gitlab-rails-ce, graalvm, pulumi,...

GHSA-2G4F-4PWH-QVX6 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, wazuh-dashboard, gemini-cli, kibana, py3-jupyterlab, drupal, tileserver-gl, opensearch-dashboards-fips, langfuse-fips, argo-workflows, saf, vitess, langfuse, gitlab-rails-ce-fips, opensearch-dashboards, gitlab-rails-ce, arangodb,...

GHSA-83G3-92JG-28CX vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, wazuh-dashboard, kibana, py3-jupyterlab, actions-runner, drupal, lerna, tileserver-gl, opensearch-dashboards-fips, saf, vitess, code-server, pnpm-stage0, gitlab-rails-ce-fips, opensearch-dashboards, gitlab-rails-ce, graalvm, pulumi,...

CVE-2025-69873 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, wazuh-dashboard, gemini-cli, kibana, py3-jupyterlab, drupal, tileserver-gl, opensearch-dashboards-fips, langfuse-fips, argo-workflows, saf, vitess, langfuse, gitlab-rails-ce-fips, opensearch-dashboards, gitlab-rails-ce, arangodb,...

CVE-2026-24739 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server...

GHSA-R39X-JCWW-82V6 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server...

📄 JUNG Smart Visu Server Cache Poisoning

Python proof of concept web cache poisoning exploit for JUNG Smart Visu Server that builds on the finding from LiquidWorm. ============================================================================================================================================= | Title : JUNG Smart Visu Server...

Exploit for Improper Access Control in Joomla Joomla\!

🚨 MegaScanner — Ethical Web Vulnerability Mega Scanner v2.0...

ARGUS

ARGUS - All-seeing Recon & General Unified Security...

GHSA-8FGC-7CC6-RX7X vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, librechat, langfuse-fips, kubeflow-katib, langfuse, gitlab-rails-ce-fips, drupal...

GHSA-38R7-794H-5758 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, librechat, langfuse-fips, kubeflow-katib, langfuse, gitlab-rails-ce-fips, drupal...

CVE-2025-68458 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, librechat, langfuse-fips, kubeflow-katib, langfuse, gitlab-rails-ce-fips, drupal...

CVE-2025-68157 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, librechat, langfuse-fips, kubeflow-katib, langfuse, gitlab-rails-ce-fips, drupal...

DRUPAL-CONTRIB-2026-010

This module enables you to integrate and manage icons with Drupal. The module doesn't sufficiently sanitize user input leading to a reflected Cross-site Scripting XSS vulnerability. The vulnerability is mitigated by the fact that in order to be vulnerable, the "UI Icons for CKEditor 5" submodule...

DRUPAL-CONTRIB-2026-009

This module allows content to be edited in-place. The module doesn't sufficiently sanitize certain image-related values during the editing process leading to a persistent Cross-site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker must have permission to...