CVE-2026-15742 affecting package postgresql for versions less than 16.15-1

CVE-2026-15742 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14666 affecting package postgresql for versions less than 16.15-1

CVE-2026-14666 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14663 affecting package postgresql for versions less than 16.15-1

CVE-2026-14663 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64654 affecting package gh for versions less than 2.97.0-1

CVE-2026-64654 affecting package gh for versions less than 2.97.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14678 affecting package postgresql for versions less than 16.15-1

CVE-2026-14678 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-6470 affecting package postgresql for versions less than 16.15-1

CVE-2026-6470 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14679 affecting package postgresql for versions less than 16.15-1

CVE-2026-14679 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14671 affecting package postgresql for versions less than 16.15-1

CVE-2026-14671 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-6464 affecting package postgresql for versions less than 16.15-1

CVE-2026-6464 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14662 affecting package postgresql for versions less than 16.15-1

CVE-2026-14662 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-6469 affecting package postgresql for versions less than 16.15-1

CVE-2026-6469 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-16241 affecting package postgresql for versions less than 16.15-1

CVE-2026-16241 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-19385 affecting package postgresql for versions less than 16.15-1

CVE-2026-19385 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-18408 affecting package postgresql for versions less than 16.15-1

CVE-2026-18408 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14673 affecting package postgresql for versions less than 16.15-1

CVE-2026-14673 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-13757 affecting package p11-kit for versions less than 0.26.5-1

CVE-2026-13757 affecting package p11-kit for versions less than 0.26.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14669 affecting package postgresql for versions less than 16.15-1

CVE-2026-14669 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

Wagtail: Reflected XSS in dynamic image URL generator view

Impact A reflected cross-site scripting XSS vulnerability exists on the dynamic image URL generator view within the Wagtail admin interface. A user with a limited-permission editor account for the Wagtail admin could craft a URL that, when viewed by a user with higher privileges, could perform...

GHSA-23M2-MGHX-VQMF Wagtail: Reflected XSS in dynamic image URL generator view

Impact A reflected cross-site scripting XSS vulnerability exists on the dynamic image URL generator view within the Wagtail admin interface. A user with a limited-permission editor account for the Wagtail admin could craft a URL that, when viewed by a user with higher privileges, could perform...

Wagtail: Pages translations can be created without page permissions when using simple_translation

Impact A low-level user with the "Can submit translation" permission can create translations for any page, including those they do not have permissions for. Patches Patched versions have been released as Wagtail 7.0.8, 7.3.3, 7.4.2. Workarounds N/A Acknowledgements Many thanks to @devansh3008 and...