egg-scripts-CVE-2018-3786

egg-scripts deploy tool for egg project. Note: Windows is partially supported, see22 Install $ npm i egg-scripts --save Usage Add eggctl to package.json scripts: "scripts": "start": "eggctl start --daemon", "stop": "eggctl stop" Then run as: npm start npm stop Note: egg-scripts is not recommended...

CLEANSTART-2023-XN05686 egg-compile

Security vulnerability affects the chicken package. egg-compile...

CVE-2026-96832

Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...

EUVD-2026-89884

Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...

CVE-2026-96832 WordPress Content Egg plugin <= 6.3.1 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...

CVE-2026-96832

The WordPress Content Egg plugin (versions

CVE-2026-96832 WordPress Content Egg plugin <= 6.3.1 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...

CVE-2026-92424

The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author's identity before creating the resulting post, allowing users with contributor-level access and abo...

EUVD-2026-89621

The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author's identity before creating the resulting post, allowing users with contributor-level access and abo...

CVE-2026-92424 Content Egg < 11.9.0 - Contributor+ Stored XSS via Import Queue

The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author's identity before creating the resulting post, allowing users with contributor-level access and abo...

WordPress Content Egg plugin < 11.9.0 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by aymen benlamari in WordPress Plugin Content Egg versions 11.9.0...

CVE-2026-92424

The Content Egg WordPress plugin (versions prior to 11.9.0 ) is vulnerable to a stored Cross-Site Scripting (XSS) flaw. The issue arises because the bulk content-import feature fails to verify if a user is authorized to use a selected import preset; instead, it switches to the preset author's ide...

CVE-2026-92424 Content Egg < 11.9.0 - Contributor+ Stored XSS via Import Queue

The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author's identity before creating the resulting post, allowing users with contributor-level access and abo...

CVE-2026-92424: Improper Neutralization of Input During Web Page Generation

The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author's identity before creating the resulting post, allowing users with contributor-level access and abo...

CVE-2026-96832: Deserialization of Untrusted Data

Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...

PT-2026-103216

Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...

PT-2026-103042

The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author's identity before creating the resulting post, allowing users with contributor-level access and abo...

@142vip/egg-grpc-client (>=0.0.1-alpha.3, <=0.0.1-alpha.4), @142vip/egg-grpc-server (>=0.0.1-alpha.3, <=0.0.1-alpha.5) +248 more potentially affected by CVE-2026-101915 via @grpc/grpc-js (>=1.14.0, <=1.14.4)

@grpc/grpc-js NPM version =1.14.0, =0.0.1-alpha.3, =0.0.1-alpha.3, =0.0.1-alpha.2, =0.26.4, =3.2.4, =1.13.0, =2.0.2, =0.1.0-alpha.0, =0.1.0, =2.1.0, =2.2.2, =2.0.0, =0.13.3, =0.0.4, =0.0.38 and more Source cves: CVE-2026-101915 Source advisory: SNYK:JS-GRPCGRPCJS-20251007...

WordPress Content Egg plugin <= 6.3.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Content Egg versions = 6.3.1...

Friday Squid Blogging: On Squid Egg Sacs

Short essay about squid egg sacs. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...