CVE-2026-107379 enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash

savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitizer allows a crafted SVG DTD with a FIXED attribute default to make cleanAttributesOnWhitelist perform a double DOMElement::removeAttribute call on the same attribute name in src/Sanitizer.php. The first removal deletes the...

CVE-2026-107379 enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash

savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitizer allows a crafted SVG DTD with a FIXED attribute default to make cleanAttributesOnWhitelist perform a double DOMElement::removeAttribute call on the same attribute name in src/Sanitizer.php. The first removal deletes the...

CVE-2026-107379

The PHP SVG/XML sanitizer svg-sanitizer is vulnerable in versions prior to 1.0.0 due to a flaw in the src/Sanitizer.php file. Specifically, a crafted SVG DTD with a #FIXED attribute default can cause the cleanAttributesOnWhitelist() function to perform a double DOMElement::removeAttribute() call ...

EUVD-2026-95136

savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitizer allows a crafted SVG DTD with a FIXED attribute default to make cleanAttributesOnWhitelist perform a double DOMElement::removeAttribute call on the same attribute name in src/Sanitizer.php. The first removal deletes the...

EUVD-2026-95133

webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser performs recursive descent without a recursion limit in parseSelectionSet, parseValueLiteral, and parseTypeReference. A remote attacker can submit deeply nested selection sets, obje...

CVE-2026-107376 webonyx graphql-php: Unbounded recursion in parser causes stack overflow on crafted nested input

webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser performs recursive descent without a recursion limit in parseSelectionSet, parseValueLiteral, and parseTypeReference. A remote attacker can submit deeply nested selection sets, obje...

CVE-2026-107376

The webonyx graphql-php PHP implementation of the GraphQL specification is vulnerable to a stack overflow via uncontrolled recursion. Specifically, the GraphQL\Language\Parser performs recursive descent without a limit in parseSelectionSet , parseValueLiteral , and parseTypeReference . A remote a...

CVE-2026-107376

webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser performs recursive descent without a recursion limit in parseSelectionSet, parseValueLiteral, and parseTypeReference. A remote attacker can submit deeply nested selection sets, obje...

WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Kalles versions = 1.1.7.1...

WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Avala versions = 1.1.4...

WordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme WineShop versions = 3.20...

WordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Equadio versions = 1.1.4...

WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Juno versions = 2.25...

WordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme N7 | Golf Club Sports & Events versions = 2.21...

WordPress Invetex theme <= 2.18 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Invetex versions = 2.18...

WordPress Law Office theme <= 3.20 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Law Office versions = 3.20...

EUVD-2026-95118

Malcolm file-upload component ships the upstream FilePond PHP server pqina/filepond-server-php largely unmodified: Dockerfile copies all upstream .php files and Malcolm only overwrites config.php and submit.php. Upstream index.php exposes a fetch API route that instructs the server to download an...

CVE-2026-107362 Server-Side Request Forgery in Malcolm

Malcolm file-upload component ships the upstream FilePond PHP server pqina/filepond-server-php largely unmodified: Dockerfile copies all upstream .php files and Malcolm only overwrites config.php and submit.php. Upstream index.php exposes a fetch API route that instructs the server to download an...

CVE-2026-107362

The Malcolm file-upload component is vulnerable to a Server-Side Request Forgery (SSRF) due to its inclusion of the upstream FilePond PHP server (pqina/filepond-server-php) with largely unmodified files. Specifically, the upstream index.php contains a fetch API route that uses curl (with FOLLOWLO...

CVE-2026-107362 Server-Side Request Forgery in Malcolm

Malcolm file-upload component ships the upstream FilePond PHP server pqina/filepond-server-php largely unmodified: Dockerfile copies all upstream .php files and Malcolm only overwrites config.php and submit.php. Upstream index.php exposes a fetch API route that instructs the server to download an...