CVE-2026-42326

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file a malicious input file could cause an out of bounds read of a single byte. This issue has been patched in versions 6.9.13-47 an...

CVE-2026-42326 ImageMagick: Heap Buffer Over-Read in IPTC encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file a malicious input file could cause an out of bounds read of a single byte. This issue has been patched in versions 6.9.13-47 an...

CVE-2026-42326 ImageMagick: Heap Buffer Over-Read in IPTC encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file a malicious input file could cause an out of bounds read of a single byte. This issue has been patched in versions 6.9.13-47 an...

Malicious code in @solana-labs/web3.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b0523027116b3981b0f1dfe925f01d8956eb19817aae6ea7d0022d5357fba4 Package @solana-labs/web3.js impersonates the legitimate @solana/web3.js and re-exports it as cover while running a malicious postinstall node...

CVE-2026-49821

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission's buildermgr controller processed Package CRDs without verifying that Package.spec.environment.namespace matched...

com.openshift.jenkins:openshift-pipeline (>=1.0.14, <=1.0.57), org.jenkins-ci.infra:pipeline-metadata-utils (>=1.0, <=1.2) +6 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.651)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.openshift.jenkins:openshift-pipeline =1.0.14, =1.0, =0.10, =2.0.1, =1.58, =1.63 -...

com.openshift.jenkins:openshift-pipeline (>=1.0.14, <=1.0.57), org.jenkins-ci.infra:pipeline-metadata-utils (>=1.0, <=1.2) +6 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.651)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.openshift.jenkins:openshift-pipeline =1.0.14, =1.0, =0.10, =2.0.1, =1.58, =1.63 -...

com.openshift.jenkins:openshift-pipeline (>=1.0.14, <=1.0.57), org.jenkins-ci.infra:pipeline-metadata-utils (>=1.0, <=1.2) +6 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.651)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.openshift.jenkins:openshift-pipeline =1.0.14, =1.0, =0.10, =2.0.1, =1.58, =1.63 -...

com.sonyericsson.hudson.plugins.rebuild:rebuild (>=1.15, <=1.27), eu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin (1.5.0) +8 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.481)

org.jenkins-ci.main:jenkins-core MAVEN version 1.481 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.rebuild:rebuild =1.15, =2.4, =2.5.4 Source cves: CVE-2026-53442...

com.sonyericsson.hudson.plugins.rebuild:rebuild (>=1.15, <=1.27), eu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin (1.5.0) +8 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.481)

org.jenkins-ci.main:jenkins-core MAVEN version 1.481 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.rebuild:rebuild =1.15, =2.4, =2.5.4 Source cves: CVE-2026-53440...

com.sonyericsson.hudson.plugins.rebuild:rebuild (>=1.15, <=1.27), eu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin (1.5.0) +8 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.481)

org.jenkins-ci.main:jenkins-core MAVEN version 1.481 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.rebuild:rebuild =1.15, =2.4, =2.5.4 Source cves: CVE-2026-53436...

com.gurkensalat.jenkins-ci.plugins:transifex (0.1.0), com.rubiconred.jenkins:myst-plugin (>=2.4.3.1, <=2.5.0.0) +39 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.509.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.gurkensalat.jenkins-ci.plugins:transifex 0.1.0 - com.rubiconred.jenkins:myst-plugin...

com.openshift.jenkins:openshift-pipeline (>=1.0.14, <=1.0.57), org.jenkins-ci.infra:pipeline-metadata-utils (>=1.0, <=1.2) +6 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.651)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.openshift.jenkins:openshift-pipeline =1.0.14, =1.0, =0.10, =2.0.1, =1.58, =1.63 -...

com.gurkensalat.jenkins-ci.plugins:transifex (0.1.0), com.rubiconred.jenkins:myst-plugin (>=2.4.3.1, <=2.5.0.0) +39 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.509.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.gurkensalat.jenkins-ci.plugins:transifex 0.1.0 - com.rubiconred.jenkins:myst-plugin...

com.openshift.jenkins:openshift-pipeline (>=1.0.14, <=1.0.57), org.jenkins-ci.infra:pipeline-metadata-utils (>=1.0, <=1.2) +6 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.651)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.openshift.jenkins:openshift-pipeline =1.0.14, =1.0, =0.10, =2.0.1, =1.58, =1.63 -...

com.sonyericsson.hudson.plugins.rebuild:rebuild (>=1.15, <=1.27), eu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin (1.5.0) +8 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.481)

org.jenkins-ci.main:jenkins-core MAVEN version 1.481 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.rebuild:rebuild =1.15, =2.4, =2.5.4 Source cves: CVE-2026-53438...

com.openshift.jenkins:openshift-pipeline (>=1.0.14, <=1.0.57), org.jenkins-ci.infra:pipeline-metadata-utils (>=1.0, <=1.2) +6 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.651)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.openshift.jenkins:openshift-pipeline =1.0.14, =1.0, =0.10, =2.0.1, =1.58, =1.63 -...

com.gurkensalat.jenkins-ci.plugins:transifex (0.1.0), com.rubiconred.jenkins:myst-plugin (>=2.4.3.1, <=2.5.0.0) +39 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.509.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.gurkensalat.jenkins-ci.plugins:transifex 0.1.0 - com.rubiconred.jenkins:myst-plugin...

CVE-2026-47352

Authenticated backend users were able to retrieve file metadata via several Backend API routes without proper permission checks, allowing access to files outside their permitted file mounts or storages. This issue affects TYPO3 CMS versions before 10.4.57, 11.0.0-11.5.51, 12.0.0-12.4.46,...

CVE-2026-53693 MISP BSimVis stored cross-site scripting in tag and cluster rendering paths via unescaped tag metadata and UI labels

A stored cross-site scripting vulnerability existed in MISP BSimVis tag rendering code. Several client-side rendering paths interpolated tag names, collection names, entity identifiers, cluster names, and tag metadata directly into HTML, HTML attributes, inline JavaScript event handlers, and CSS...