CVE-2026-32577

The Frontend File Manager plugin for WordPress (versions

EUVD-2026-93238

Unauthenticated Cross Site Scripting XSS in Frontend File Manager = 23.6 versions...

CVE-2026-32577 WordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Frontend File Manager = 23.6 versions...

CVE-2026-32577 WordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Frontend File Manager = 23.6 versions...

EUVD-2026-93235

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

CVE-2026-32572 WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

CVE-2026-32572 WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

CVE-2026-32572

The WP User Frontend Pro plugin for WordPress (versions

[SECURITY] Fedora 45 Update: ocaml-psmt2-frontend-0.4.0-33.fc45

This package contains a library to parse and typecheck a conservative extension of the SMT-LIB 2 standard with prenex polymorphism...

PT-2026-106400

Name of the Vulnerable Software and Affected Versions WP User Frontend Pro versions prior to 4.2.14 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication...

CVE-2026-32572: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-93323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversiz...

PT-2026-106403

Name of the Vulnerable Software and Affected Versions Frontend File Manager versions 23.6 and earlier Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user by injecting code into a web page...

CVE-2026-32577: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Frontend File Manager = 23.6 versions...

CVE-2026-105759

The vLLM inference and serving engine for large language models is vulnerable to a Denial of Service (DoS) attack in versions prior to 0.30.0 . The root cause lies in the Rust frontend's track_http_metrics middleware, which records raw HTTP method tokens as Prometheus labels without validation or...

CVE-2026-105759 vLLM: Unbounded Prometheus label cardinality from attacker-controlled HTTP method tokens in the vLLM Rust frontend metrics middleware (unauthenticated denial of service)

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's trackhttpmetrics middleware records the raw HTTP method token as a Prometheus label for requests reaching registered routes. An unauthenticated attacker can send unique arbitrary method tokens ...

EUVD-2026-92850

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's trackhttpmetrics middleware records the raw HTTP method token as a Prometheus label for requests reaching registered routes. An unauthenticated attacker can send unique arbitrary method tokens ...

CVE-2026-105759 vLLM: Unbounded Prometheus label cardinality from attacker-controlled HTTP method tokens in the vLLM Rust frontend metrics middleware (unauthenticated denial of service)

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's trackhttpmetrics middleware records the raw HTTP method token as a Prometheus label for requests reaching registered routes. An unauthenticated attacker can send unique arbitrary method tokens ...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value due to unbounded file reads in ReadEntrypoint, dockerIgnorePatterns, and NamedContext.load in frontend/dockerui/config.go and frontend/dockerui/namedcontext.go. An attacker can exhaust buildki...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value due to unbounded file reads in ReadEntrypoint, dockerIgnorePatterns, and NamedContext.load in frontend/dockerui/config.go and frontend/dockerui/namedcontext.go. An attacker can exhaust buildki...