GHSA-WHHX-PV66-XHGQ vulnerabilities

Vulnerabilities for packages: perl...

CVE-2026-13221 vulnerabilities

Vulnerabilities for packages: perl...

GHSA-5G35-5JRJ-F39P vulnerabilities

Vulnerabilities for packages: perl...

GHSA-HGVH-MHW9-C77H vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15774 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GC92-VPV6-2C4W vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QPX7-R6J6-CQF3 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15769 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-FVWF-CX56-8X5C vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-MC7H-7X47-9J48 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-PH5F-PJVP-H9X6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XXVR-RJCX-VQW8 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15777 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6GFG-HH9C-WX87 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-F3VQ-GJQX-3PG9 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-FFVP-VXW4-JCM4 vulnerabilities

Vulnerabilities for packages: chromium...

@activeboxes/piece-image-helper (0.1.0), @activepieces/piece-image-helper (>=0.0.5, <=0.1.15) +24 more potentially affected by CVE-2026-53496 via exifreader (>=4.1.1, <=4.39.1)

exifreader NPM version =4.1.1, =0.0.5, =0.1.0, =1.18.1-dev.1638815480459, =1.0.2, =2.2.8, =2.1.11, =1.0.6, =0.5.0, =4.10.0, =1.0.0-beta.141, =1.0.0-beta.143 and more Source cves: CVE-2026-53496 Source advisory: OSV:GHSA-G77H-45RF-HCX4...

GO-2026-5965 SiYuan: Stored XSS in Bazaar marketplace via package README event handlers in github.com/siyuan-note/siyuan/kernel

SiYuan: Stored XSS in Bazaar marketplace via package README event handlers in github.com/siyuan-note/siyuan/kernel...

GO-2026-5968 melange: Incomplete package integrity verification allows data section substitution in chainguard.dev/apko

melange: Incomplete package integrity verification allows data section substitution in chainguard.dev/apko...

Gitea has insufficient permission checks for Composer package source links

CVE Description Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information. Summary A critical vulnerability has been discovered in Gitea. It was already reported via...