CVE-2026-92772

Leantime before 3.9.6 contains an authorization bypass vulnerability in the HTMX plugin install endpoint that lacks permission validation. Authenticated users with limited roles can install marketplace plugins and control arbitrary properties including identifier, version, and license key to depl...

CVE-2026-92772 Leantime before 3.9.6 Unauthorized Plugin Installation via HTMX

Leantime before 3.9.6 contains an authorization bypass vulnerability in the HTMX plugin install endpoint that lacks permission validation. Authenticated users with limited roles can install marketplace plugins and control arbitrary properties including identifier, version, and license key to depl...

CVE-2026-92772 Leantime before 3.9.6 Unauthorized Plugin Installation via HTMX

Leantime before 3.9.6 contains an authorization bypass vulnerability in the HTMX plugin install endpoint that lacks permission validation. Authenticated users with limited roles can install marketplace plugins and control arbitrary properties including identifier, version, and license key to depl...

CVE-2026-92772

Leantime before 3.9.6 contains an authorization bypass in the HTMX plugin install endpoint , which lacks permission validation. Authenticated users with limited roles can install marketplace plugins and control arbitrary properties—including identifier , version , and license key —to deploy malic...

EUVD-2026-81036

Leantime before 3.9.6 contains an authorization bypass vulnerability in the HTMX plugin install endpoint that lacks permission validation. Authenticated users with limited roles can install marketplace plugins and control arbitrary properties including identifier, version, and license key to depl...

CVE-2026-92772 Leantime before 3.9.6 Unauthorized Plugin Installation via HTMX

Leantime before 3.9.6 contains an authorization bypass vulnerability in the HTMX plugin install endpoint that lacks permission validation. Authenticated users with limited roles can install marketplace plugins and control arbitrary properties including identifier, version, and license key to depl...

PT-2026-94050

Name of the Vulnerable Software and Affected Versions Leantime versions prior to 3.9.6 Description An authorization bypass exists in the HTMX plugin install endpoint due to a lack of permission validation. This allows authenticated users with limited roles to install marketplace plugins and...

CVE-2026-92772: Missing Authorization

Leantime before 3.9.6 contains an authorization bypass vulnerability in the HTMX plugin install endpoint that lacks permission validation. Authenticated users with limited roles can install marketplace plugins and control arbitrary properties including identifier, version, and license key to depl...

3lc (>=2.19.0, <=2.22.0), 3lc-ultralytics (>=0.1.7, <=0.2.1) +5 more potentially affected by CVE-2026-48061 via litestar (>=2.0.0b2, <=2.15.2)

litestar PYPI version =2.0.0b2, =2.19.0, =0.1.7, =0.1.0, =0.2.0, =0.3.14, =0.3.35 Source cves: CVE-2026-48061 Source advisory: MEND:CVE-2026-48061...

DRUPAL-CORE-2026-011

Drupal core 11.2 and above integrate the HTMX JavaScript library. Drupal core's XSS filter does not sufficiently sanitize certain HTMX attributes, which can lead to a cross-site scripting XSS vulnerability. The vulnerability is mitigated by the fact an attacker must be able to insert HTML with...

Drupal 10.6.x < 10.6.13 / 11.3.x < 11.3.14 / 11.4.x < 11.4.4 Multiple Vulnerabilities (drupal-2026-07-15)

According to its self-reported version, the instance of Drupal running on the remote web server is 10.6.x prior to 10.6.13, 11.3.x prior to 11.3.14, or 11.4.x prior to 11.4.4. It is, therefore, affected by multiple vulnerabilities. - Drupal core 11.2 and above integrate the HTMX JavaScript librar...

Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011

Drupal core 11.2 and above integrate the HTMX JavaScript library. Drupal core's XSS filter does not sufficiently sanitize certain HTMX attributes, which can lead to a cross-site scripting XSS vulnerability. The vulnerability is mitigated by the fact an attacker must be able to insert HTML with...

PT-2026-60354

Name of the Vulnerable Software and Affected Versions Drupal core versions 0.0.0 through 11.3.14 Drupal core versions 11.4.0 through 11.4.4 Description Drupal core contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. The XSS filter does not...

3lc (>=2.19.0, <=2.22.0), 3lc-ultralytics (>=0.1.7, <=0.2.1) +5 more potentially affected by CVE-2026-48060 via litestar (>=2.0.0b2, <=2.15.2)

litestar PYPI version =2.0.0b2, =2.19.0, =0.1.7, =0.1.0, =0.2.0, =0.3.14, =0.3.35 Source cves: CVE-2026-48060 Source advisory: OSV:PYSEC-2026-2604...

3lc (>=2.19.0, <=2.22.0), 3lc-ultralytics (>=0.1.7, <=0.2.1) +5 more potentially affected by CVE-2026-48061 via litestar (>=2.0.0b2, <=2.15.2)

litestar PYPI version =2.0.0b2, =2.19.0, =0.1.7, =0.1.0, =0.2.0, =0.3.14, =0.3.35 Source cves: CVE-2026-48061 Source advisory: OSV:PYSEC-2026-2603...

3lc (>=2.19.0, <=2.22.0), 3lc-ultralytics (>=0.1.7, <=0.2.1) +5 more potentially affected by CVE-2026-48061 via litestar (>=2.0.0b2, <=2.15.2)

litestar PYPI version =2.0.0b2, =2.19.0, =0.1.7, =0.1.0, =0.2.0, =0.3.14, =0.3.35 Source cves: CVE-2026-48061 Source advisory: SNYK:PYTHON-LITESTAR-17304677...

3lc (>=2.19.0, <=2.22.0), 3lc-ultralytics (>=0.1.7, <=0.2.1) +5 more potentially affected by CVE-2026-48061 via litestar (>=2.0.0b2, <=2.15.2)

litestar PYPI version =2.0.0b2, =2.19.0, =0.1.7, =0.1.0, =0.2.0, =0.3.14, =0.3.35 Source cves: CVE-2026-48061 Source advisory: GHSA-3QMC-CJ7Q-62HV...

3lc (>=2.19.0, <=2.22.0), 3lc-ultralytics (>=0.1.7, <=0.2.1) +5 more potentially affected by CVE-2026-48060 via litestar (>=2.0.0b2, <=2.15.2)

litestar PYPI version =2.0.0b2, =2.19.0, =0.1.7, =0.1.0, =0.2.0, =0.3.14, =0.3.35 Source cves: CVE-2026-48060 Source advisory: GHSA-542P-WVX7-72M4...

PT-2026-41492

Summary The kanidmd web UI renders the WebAuthn passkey-registration challenge as raw JSON inside an inline element using the Askama |safe filter. The challenge embeds the account's displayname, which serde json serialises without escaping . A displayname containing therefore terminates the scrip...

3lc (>=2.19.0, <=2.22.0), 3lc-ultralytics (>=0.1.7, <=0.2.1) +5 more potentially affected by CVE-2026-25478 via litestar (>=2.0.0b2, <=2.15.2)

litestar PYPI version =2.0.0b2, =2.19.0, =0.1.7, =0.1.0, =0.2.0, =0.3.14, =0.3.35 Source cves: CVE-2026-25478 Source advisory: SNYK:PYTHON-LITESTAR-15253000...