PT-2026-127894

The Webheadcoder Multi-Step Forms for Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'l10n print after' parameter in all versions up to, and including, 4.7 due to insufficient input sanitization and output escaping. This makes it possible for...

Updated thunderbird & thunderbird-l10n packages fix security vulnerabilities

Ambiguous parsing of mail headers. CVE-2026-92238 Buffer overrun in IMAP. CVE-2026-92239 Out-of-bounds read in IMAP response parser. CVE-2026-92240 Use-after-free in the Audio/Video: Web Codecs component. CVE-2026-92005 Privilege escalation due to incorrect boundary conditions in the Graphics:...

MGASA-2026-0449 Updated thunderbird & thunderbird-l10n packages fix security vulnerabilities

Ambiguous parsing of mail headers. CVE-2026-92238 Buffer overrun in IMAP. CVE-2026-92239 Out-of-bounds read in IMAP response parser. CVE-2026-92240 Use-after-free in the Audio/Video: Web Codecs component. CVE-2026-92005 Privilege escalation due to incorrect boundary conditions in the Graphics:...

Malicious code in l10n-mgr (npm)

The package l10n-mgr was found to contain malicious code. --- Credit: OpenSSF source...

Mageia: Security Advisory (MGASA-2025-0300)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malware in bernie-plugin-l10n

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview bernie-plugin-l10n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in bernie-plugin-l10n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd6d3c0bbb9843d7995ddad49f2b4142829723406f19e006a25df0ff156e9451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wg-rblb-l10n (npm)

The package wg-rblb-l10n was found to contain malicious code...

Malicious code in pp-react-l10n (npm)

The package pp-react-l10n was found to contain malicious code...

MAL-2025-29565 Malicious code in pp-react-l10n (npm)

The package pp-react-l10n was found to contain malicious code...

MAL-2025-24853 Malicious code in l10n-mgr (npm)

The package l10n-mgr was found to contain malicious code...

MAL-2025-39102 Malicious code in wg-rblb-l10n (npm)

The package wg-rblb-l10n was found to contain malicious code...

Malware in mozilla-l10n-docs-linter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-6179 Malicious code in mozilla-l10n-docs-linter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d878786926dde4c1aa2b65c2241ee43a14fbd2a46d890e608e4374ef405ff359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2649 Malicious code in blockzie-l10n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2353a952e23fecee0510fab3cee1d38621eca579f67b7f81155b48edd7da9669 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in blockzie-l10n

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in blockzie-l10n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2353a952e23fecee0510fab3cee1d38621eca579f67b7f81155b48edd7da9669 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mageia: Security Advisory (MGASA-2024-0383)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2024-0384)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...