295296 matches found
CLSA-2026-1792489214 TuxCare security update for @babel/plugin-transform-optional-catch-binding (1 CVE)
TuxCare rebuilt @babel/plugin-transform-optional-catch-binding to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
CLSA-2026-1792489213 TuxCare security update for @babel/plugin-transform-optional-catch-binding (1 CVE)
TuxCare rebuilt @babel/plugin-transform-optional-catch-binding to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
EUVD-2026-104866
The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it. Any site visitor can set orders that are still awaiting payment to "canceled". This requires a page that contains the shop's order plugin. Orders that are...
CVE-2026-112071
The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it. Any site visitor can set orders that are still awaiting payment to "canceled". This requires a page that contains the shop's order plugin. Orders that are...
CLSA-2026-1792486531 TuxCare security update for @babel/plugin-transform-optional-chaining (1 CVE)
TuxCare rebuilt @babel/plugin-transform-optional-chaining to address 1 CVE. Fixed in 7.23.0-tuxcare.3...
CLSA-2026-1792486532 TuxCare security update for @babel/plugin-transform-optional-chaining (1 CVE)
TuxCare rebuilt @babel/plugin-transform-optional-chaining to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
CLSA-2026-1792486525 TuxCare security update for @babel/plugin-transform-optional-chaining (2 CVEs)
TuxCare rebuilt @babel/plugin-transform-optional-chaining to address 2 CVEs. Fixed in 7.24.5-tuxcare.1...
CLSA-2026-1792486527 TuxCare security update for @babel/plugin-transform-optional-chaining (1 CVE)
TuxCare rebuilt @babel/plugin-transform-optional-chaining to address 1 CVE. Fixed in 7.24.5-tuxcare.2...
CLSA-2026-1792486526 TuxCare security update for @babel/plugin-transform-optional-chaining (2 CVEs)
TuxCare rebuilt @babel/plugin-transform-optional-chaining to address 2 CVEs. Fixed in 7.23.0-tuxcare.1...
CLSA-2026-1792486524 TuxCare security update for @babel/plugin-transform-optional-chaining (1 CVE)
TuxCare rebuilt @babel/plugin-transform-optional-chaining to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
CLSA-2026-1792486523 TuxCare security update for @babel/plugin-transform-optional-chaining (1 CVE)
TuxCare rebuilt @babel/plugin-transform-optional-chaining to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Deva Parekh in WordPress Plugin SureCart versions = 4.9.5...
Malicious code in animatecss-tailwind-helper (npm)
animatecss-tailwind-helper 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by hannahgibbs on 2026-09-28. src/motion.js:5 requires the private scoped package...
Malicious code in signalledger-diagnostics (npm)
signalledger-diagnostics 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by scott-rogers on 2026-09-28. src/motion.js:5 requires the private scoped package...
Malicious code in animatecss-tailwind-plugin (npm)
animatecss-tailwind-plugin 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by hannahgibbs on 2026-09-28. src/motion.js:5 requires the private scoped package...
CLSA-2026-1792461787 TuxCare security update for @babel/plugin-transform-private-methods (1 CVE)
TuxCare rebuilt @babel/plugin-transform-private-methods to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
CLSA-2026-1792461784 TuxCare security update for @babel/plugin-transform-private-methods (1 CVE)
TuxCare rebuilt @babel/plugin-transform-private-methods to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
CLSA-2026-1792461783 TuxCare security update for @babel/plugin-transform-private-methods (1 CVE)
TuxCare rebuilt @babel/plugin-transform-private-methods to address 1 CVE. Fixed in 7.29.0-tuxcare.1...