CLSA-2026-1785117456 TuxCare security update for form-data (3 CVEs)

TuxCare rebuilt form-data to address 3 CVEs. Fixed in 2.0.0-tuxcare.2...

CLSA-2026-1784856187 TuxCare security update for form-data (1 CVE)

TuxCare rebuilt form-data to address 1 CVE. Fixed in 4.0.1-tuxcare.2...

CLSA-2026-1781484855 TuxCare security update for form-data (8 CVEs)

TuxCare rebuilt form-data to address 8 CVEs. Fixed in 4.0.1-tuxcare.1...

CLSA-2026-1781484836 TuxCare security update for form-data (5 CVEs)

TuxCare rebuilt form-data to address 5 CVEs. Fixed in 4.0.0-tuxcare.1...

CLSA-2026-1777941829 TuxCare security update for form-data (4 CVEs)

TuxCare rebuilt form-data to address 4 CVEs. Fixed in 1.0.1-tuxcare.1...

CLSA-2026-1776818195 TuxCare security update for form-data (13 CVEs)

TuxCare rebuilt form-data to address 13 CVEs. Fixed in 2.0.0-tuxcare.1...

CLSA-2026-1776818216 TuxCare security update for form-data (2 CVEs)

TuxCare rebuilt form-data to address 2 CVEs. Fixed in 2.1.4-tuxcare.1...

CLSA-2026-1774743826 TuxCare security update for form-data (4 CVEs)

TuxCare rebuilt form-data to address 4 CVEs. Fixed in 0.1.4-tuxcare.1...

CLSA-2026-1774743810 TuxCare security update for form-data (3 CVEs)

TuxCare rebuilt form-data to address 3 CVEs. Fixed in 0.0.8-tuxcare.1...

CLSA-2026-1774743825 TuxCare security update for form-data (6 CVEs)

TuxCare rebuilt form-data to address 6 CVEs. Fixed in 2.3.3-tuxcare.1...

CLSA-2026-1773188144 TuxCare security update for form-data (1 CVE)

TuxCare rebuilt form-data to address 1 CVE. Fixed in 1.0.0-rc3-tuxcare.1...

CLSA-2026-1773101683 TuxCare security update for form-data (3 CVEs)

TuxCare rebuilt form-data to address 3 CVEs. Fixed in 0.2.0-tuxcare.1...

Malicious code in @servicetitan/form (npm)

npm/@servicetitan/form is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

MAL-2026-11870 Malicious code in @servicetitan/form (npm)

npm/@servicetitan/form is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

Malicious code in @servicetitan/form-state (npm)

npm/@servicetitan/form-state is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Exploit for CVE-2026-17543

PHP CVE-2026-17543 Exposure Validator Safe network-side valid...

CVE-2026-14872

The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL Injection exploitable by users granted a specific capability which is limited to administrators by default...

CVE-2026-14872 Database for Contact Form 7, WPforms, Elementor forms < 1.5.5 - Authenticated SQL Injection via id Parameter

The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL Injection exploitable by users granted a specific capability which is limited to administrators by default...

EUVD-2026-52587

The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL Injection exploitable by users granted a specific capability which is limited to administrators by default...

CVE-2026-14872

The CVE affects the Database for Contact Form 7, WPforms, Elementor Forms WordPress plugin, specifically versions before 1.5.5. The root cause is improper sanitisation/escaping of a parameter before use in a SQL statement, enabling a SQL Injection. The vulnerability is exploitable by users with a...