CVE-2026-11126

A vulnerability in the DevTools component of Google Chrome (and by extension, Microsoft Edge ) was caused by insufficient validation of input data . An attacker could trick a user into installing a malicious extension, which could then be used to leak cross-origin data via a crafted Chrome Extens...

CVE-2025-31487 The XWiki JIRA extension allows data leak through an XXE attack by using a fake JIRA server

The XWiki JIRA extension provides various integration points between XWiki and JIRA macros, UI, CKEditor plugin. If the JIRA macro is installed, any logged in XWiki user could edit his/her user profile wiki page and use that JIRA macro, specifying a fake JIRA URL that returns an XML specifying a...