CLSA-2026-1792525284 TuxCare security update for @babel/plugin-proposal-export-default-from (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792518700 TuxCare security update for @babel/plugin-transform-logical-assignment-operators (1 CVE)

TuxCare rebuilt @babel/plugin-transform-logical-assignment-operators to address 1 CVE. Fixed in 7.25.7-tuxcare.4...

CLSA-2026-1792518696 TuxCare security update for @babel/plugin-transform-logical-assignment-operators (1 CVE)

TuxCare rebuilt @babel/plugin-transform-logical-assignment-operators to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

CLSA-2026-1792518697 TuxCare security update for @babel/plugin-transform-logical-assignment-operators (1 CVE)

TuxCare rebuilt @babel/plugin-transform-logical-assignment-operators to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

CLSA-2026-1792514592 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

CLSA-2026-1792514591 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792514589 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (2 CVEs)

TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

CLSA-2026-1792514588 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792514587 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 1 CVE. Fixed in 7.25.7-tuxcare.4...

CLSA-2026-1792514585 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (2 CVEs)

TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792514584 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792514583 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

CLSA-2026-1792514582 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

CLSA-2026-1792514581 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

CLSA-2026-1792514580 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

CVE-2026-113613

FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...

CVE-2026-112947

Vite is a frontend tooling framework for JavaScript. From 8.2.0 until 8.2.4 and 8.3.3, the first 4 bytes of files outside of server.fs setting can be returned to the browser by a request containing ?vite-wasm-instance. Requests containing the ?vite-wasm-instance query are handled by the internal...

CVE-2026-112947

Vite is a frontend tooling framework for JavaScript. From 8.2.0 until 8.2.4 and 8.3.3, the first 4 bytes of files outside of server.fs setting can be returned to the browser by a request containing ?vite-wasm-instance. Requests containing the ?vite-wasm-instance query are handled by the internal...

Apache Traffic Server resource management error vulnerability

Versions 10.0.0 through 10.1.4 and 10.2.0 of Apache Traffic Server contain a resource management error vulnerability. This vulnerability stems from post-free reuse in the transaction close handler within an experimental WASM plugin, which forwards unvalidated metric IDs provided by guests to an...

Apache Traffic Server command injection vulnerability

The Apache Traffic Server versions 8.0.1 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a command injection vulnerability. This vulnerability arises from the experimental magick plugin, which allows unauthenticated clients to control the ImageMagick convert parameters under default...