CVE-2026-24343: Improper Neutralization of Data within XPath Expressions

Improper Neutralization of Data within XPath Expressions 'XPath Injection' vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue...

Multiple programming languages fail to escape arguments properly in Microsoft Windows

Overview Various programming languages lack proper validation mechanisms for commands and in some cases also fail to escape arguments correctly when invoking commands within a Microsoft Windows environment. The command injection vulnerability in these programming languages, when running on Window...

Security update for rubygem-loofah

This update for rubygem-loofah fixes the following issues: CVE-2022-23514: Fixed inefficient regular expression leading to denial of service bsc1206415. CVE-2022-23515: Fixed improper neutralization of data URIs leading to Cross Site Scripting bsc1206417. CVE-2022-23516: Fixed uncontrolled...