CVE-2026-15943 Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change

A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The issue occurs when a delegated administrator updates an OIDC identity provider using a masked client secret sentinel value. Due to improper validation, Keycloak reuses the existing...

The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace?

Military forces are under increasing pressure to field autonomous capabilities faster than ever before. Across the U.S., UK, and NATO, new investment, evolving defense strategies, and accelerated acquisition pathways are transforming how capability is delivered, rewarding programs that can move...

threatcl v0.6.3

threatcl Threat Modeling with HCL What happened to hcltm? hcltm has been renamed to threatcl. Welcome! Overview !TIP Want to read the new documentation? Head over to threatcl.dev There are many different ways in which a threat model can be documented. From a simple text file, to more in-depth wor...

AngleSharp HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass

The HTML specification requires that a MathML element with encoding="text/html" or encoding="application/xhtml+xml" is treated as an HTML integration point. Content inside it must be parsed as HTML, not MathML. AngleSharp does not implement this correctly. As a result, the parser produces a DOM...

PT-2026-60725

The Royal Addons for Elementor WordPress plugin before 1.7.1063 does not check the post status of menu items or the templates they reference in one of its REST endpoints, allowing unauthenticated users to retrieve the rendered HTML content of private or draft Elementor templates linked from...

CVE-2026-50197: Inconsistent Interpretation of HTTP Requests

Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipper's OpenPolicyAgent integration silently bypasses request-body inspection on HTTP/1.1 Transfer-Encoding: chunked and HTTP/2 requests that omit the content-length pseudo-header, because the...

PT-2026-60902

Name of the Vulnerable Software and Affected Versions AngleSharp versions prior to 1.5.0 Description AngleSharp fails to correctly implement the HTML specification regarding the element. When this element has an encoding attribute set to text/html or application/xhtml+xml, it should be treated as...

com.arcadedb:arcadedb-console (25.6.1), com.arcadedb:arcadedb-graphql (25.6.1) +9 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (25.6.1)

com.arcadedb:arcadedb-engine MAVEN version 25.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.6.1 - com.arcadedb:arcadedb-graphql 25.6.1 -...

com.arcadedb:arcadedb-console (24.2.1), com.arcadedb:arcadedb-coverage (24.2.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (24.2.1)

com.arcadedb:arcadedb-engine MAVEN version 24.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.2.1 - com.arcadedb:arcadedb-coverage 24.2.1 -...

com.arcadedb:arcadedb-console (21.9.1-beta), com.arcadedb:arcadedb-coverage (21.9.1-beta) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (21.9.1-beta)

com.arcadedb:arcadedb-engine MAVEN version 21.9.1-beta is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.9.1-beta - com.arcadedb:arcadedb-coverage 21.9.1-beta -...

com.arcadedb:arcadedb-console (22.10.1), com.arcadedb:arcadedb-coverage (22.10.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (22.10.1)

com.arcadedb:arcadedb-engine MAVEN version 22.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.10.1 - com.arcadedb:arcadedb-coverage 22.10.1 -...

com.arcadedb:arcadedb-console (25.3.1), com.arcadedb:arcadedb-coverage (25.3.1) +10 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (25.3.1)

com.arcadedb:arcadedb-engine MAVEN version 25.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.3.1 - com.arcadedb:arcadedb-coverage 25.3.1 -...

com.arcadedb:arcadedb-console (21.10.2), com.arcadedb:arcadedb-coverage (21.10.2) +9 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (21.10.2)

com.arcadedb:arcadedb-engine MAVEN version 21.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.10.2 - com.arcadedb:arcadedb-coverage 21.10.2 -...

com.arcadedb:arcadedb-console (23.12.2), com.arcadedb:arcadedb-coverage (23.12.2) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.12.2)

com.arcadedb:arcadedb-engine MAVEN version 23.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.12.2 - com.arcadedb:arcadedb-coverage 23.12.2 -...

com.arcadedb:arcadedb-console (22.1.1), com.arcadedb:arcadedb-coverage (22.1.1) +7 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (22.1.1)

com.arcadedb:arcadedb-engine MAVEN version 22.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.1.1 - com.arcadedb:arcadedb-coverage 22.1.1 -...

com.arcadedb:arcadedb-console (21.9.1), com.arcadedb:arcadedb-coverage (21.9.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (21.9.1)

com.arcadedb:arcadedb-engine MAVEN version 21.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.9.1 - com.arcadedb:arcadedb-coverage 21.9.1 -...

com.arcadedb:arcadedb-console (25.5.1), com.arcadedb:arcadedb-graphql (25.5.1) +9 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (25.5.1)

com.arcadedb:arcadedb-engine MAVEN version 25.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.5.1 - com.arcadedb:arcadedb-graphql 25.5.1 -...

com.arcadedb:arcadedb-console (22.12.1), com.arcadedb:arcadedb-coverage (22.12.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (22.12.1)

com.arcadedb:arcadedb-engine MAVEN version 22.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.12.1 - com.arcadedb:arcadedb-coverage 22.12.1 -...

com.arcadedb:arcadedb-console (21.11.1), com.arcadedb:arcadedb-coverage (21.11.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (21.11.1)

com.arcadedb:arcadedb-engine MAVEN version 21.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.11.1 - com.arcadedb:arcadedb-coverage 21.11.1 -...

com.arcadedb:arcadedb-console (25.1.1), com.arcadedb:arcadedb-coverage (25.1.1) +10 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (25.1.1)

com.arcadedb:arcadedb-engine MAVEN version 25.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.1.1 - com.arcadedb:arcadedb-coverage 25.1.1 -...