EUVD-2026-106865

A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file crates/server/src/pushnotificationsender.rs of the component Push Notification Handler. Such manipulation of the argument TaskPushNotificationConfig leads to server-side request...

CVE-2026-113704

A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file crates/server/src/pushnotificationsender.rs of the component Push Notification Handler. Such manipulation of the argument TaskPushNotificationConfig leads to server-side request...

CVE-2026-113704

A vulnerability exists in a2aproject a2a-rs up to version 0.4.3 within the Push Notification Handler component. Specifically, the HttpPushSender function in the file crates/server/src/push_notification_sender.rs is susceptible to server-side request forgery (SSRF) due to the manipulation of the T...

CVE-2026-113704 a2aproject a2a-rs Push Notification push_notification_sender.rs HttpPushSender server-side request forgery

A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file crates/server/src/pushnotificationsender.rs of the component Push Notification Handler. Such manipulation of the argument TaskPushNotificationConfig leads to server-side request...

CVE-2026-113704 a2aproject a2a-rs Push Notification push_notification_sender.rs HttpPushSender server-side request forgery

A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file crates/server/src/pushnotificationsender.rs of the component Push Notification Handler. Such manipulation of the argument TaskPushNotificationConfig leads to server-side request...

CVE-2026-82212

The Nexi XPay Build WordPress plugin (version 7.6.2 and below ) contains a vulnerability where the payment notification route fails to correctly validate the security token. Specifically, the plugin accepts requests when the target order lacks a stored token. This allows unauthenticated attackers...

CVE-2026-82212 Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Bypass via NPG Notification Handler

The Nexi XPay Build WordPress plugin through 7.6.2 does not correctly validate the security token on its payment notification route, accepting the request when the target order has no stored token, which allows unauthenticated attackers to mark arbitrary orders as paid, or to mark genuinely paid...

CVE-2026-63640

MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, when hideConfigSecrets is enabled, the catch-all socket dispatcher in js/nodehelper.js passes every inbound object payload through replaceSecretPlaceholder in js/serverfunctions.js before invoking...

SUSE CVE-2026-64511

In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possible NULL pointer dereference After commit 9b311b7313d6 "ACPI: NFIT: Install Notify handler before getting NFIT table", acpinfitprobe installs an ACPI notify handler for the NFIT device before checking t...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.1), org.openidentityplatform.opendj:opendj-embedded (4.9.1) +4 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.9...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.13), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.13) +2 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.13)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.openam:openam-slf4j (15.1.4), org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.2) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.4 -...

org.openidentityplatform.openam:openam-slf4j (>=16.0.1, <=16.1.1), org.openidentityplatform.opendj:opendj-dsml-servlet (>=5.0.1, <=5.1.1) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (>=5.0.1, <=5.1.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =5.0.1, =16.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.1.1 Source cves: CVE-2026-73644 Source advisory: OSV:GHSA-P279-2CQP-84JG...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.12), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.12) +2 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.12)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.openam:openam-slf4j (15.2.2), org.openidentityplatform.opendj:opendj-dsml-servlet (4.10.2) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.10.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.2.2 -...

org.openidentityplatform.openam:openam-slf4j (>=16.0.1, <=16.1.1), org.openidentityplatform.opendj:opendj-dsml-servlet (>=5.0.1, <=5.1.1) +5 more potentially affected by unknown CVE via org.openidentityplatform.opendj:opendj-server-legacy (>=5.0.1, <=5.1.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =5.0.1, =16.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.1.1 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGOPENIDENTITYPLATFORMOPENDJ-18313059...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.5.1), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.5.1) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.5.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.5...

org.openidentityplatform.openam:openam-slf4j (15.1.5), org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.3) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.3)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.5 -...

org.openidentityplatform.openam:openam-slf4j (15.1.6), org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.4) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.4)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.6 -...

org.openidentityplatform.openam:openam-slf4j (15.1.1), org.openidentityplatform.opendj:opendj-dsml-servlet (4.8.1) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.8.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.1 -...