CVE-2026-73631 Apache Struts: Shared parsing state in the JSON plugin

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, and configured parsing limits not to be enforced as intende...

GHSA-3GMF-P6R4-Q8M6 vulnerabilities

Vulnerabilities for packages: geoserver...

MINI-2HXG-MXWF-FC73

Bulletin has no description...

MINI-FQ38-7QX7-8FWF

Bulletin has no description...

MINI-H9WH-G2RX-57C8

Bulletin has no description...

MINI-J4P4-QCH6-R62C

Bulletin has no description...

MINI-943H-Q73P-9P8Q

Bulletin has no description...

MINI-HVP4-V9Q4-RWG6

Bulletin has no description...

MINI-QQ3V-2HFX-J8CH

Bulletin has no description...

MINI-974J-8X3R-G485

Bulletin has no description...

MINI-8HPJ-M8XF-2VPG

Bulletin has no description...

MINI-JJRW-2796-P97Q

Bulletin has no description...

MINI-FQ4W-MW4X-C8VF

Bulletin has no description...

MINI-H947-96XV-452R

Bulletin has no description...

MINI-6H7F-QMV6-8R3M

Bulletin has no description...

MINI-P2C7-QC7F-QFCH

Bulletin has no description...

MINI-X8R5-X48V-5887

Bulletin has no description...

MINI-3688-39CP-5VMG

Bulletin has no description...

CVE-2026-14279

The Wholesale Market plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.2.2 via the cedwholesalerequestsend AJAX action. The cedwholesalerequestsendcallback handler only verifies a nonce which is exposed to any authenticated user through wplocalizescrip...

CVE-2026-74290

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsflow: Dont expose folded kernel pointers The flow classifier falls back to addrfold for fields that are missing from packet headers. In map mode, userspace controls mask, xor, rshift, addend and divisor, and can...