CVE-2026-42047: Exposure of Sensitive Information to an Unauthorized Actor

Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53.1 contain a vulnerability that allows unauthenticated remote attackers to exfiltrate environment variables from the host process via the...

Gallery v1.3.2 allows remote exploit (fixed in 1.3.3)

PROBLEM DESCRIPTION Gallery is an open source image management system. Learn more about it at http://gallery.sourceforge.net Gallery v1.3.2 introduced a new feature that allows users to publish images to their website-based Gallery using the Windows XP Publishing subsystem. This feature introduce...