CLSA-2026-1792427003 TuxCare security update for @babel/plugin-transform-sticky-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

CLSA-2026-1792427002 TuxCare security update for @babel/plugin-transform-sticky-regex (2 CVEs)

TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792427000 TuxCare security update for @babel/plugin-transform-sticky-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792426999 TuxCare security update for @babel/plugin-transform-sticky-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.25.7-tuxcare.4...

CLSA-2026-1792426995 TuxCare security update for @babel/plugin-transform-sticky-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792426994 TuxCare security update for @babel/plugin-transform-sticky-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

CLSA-2026-1792426996 TuxCare security update for @babel/plugin-transform-sticky-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792426991 TuxCare security update for @babel/plugin-transform-sticky-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

CLSA-2026-1792426993 TuxCare security update for @babel/plugin-transform-sticky-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

CLSA-2026-1792426992 TuxCare security update for @babel/plugin-transform-sticky-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

CVE-2026-112306

NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection quer...

TYPO3: Coding.ms authorization issue vulnerability

TYPO3: There are authorization issues with versions of TYPO3 between 6.0.0 and 6.3.0, 5.0.0 and 5.21.1, and 4.9.4. This issue arises because the order cancellation function accepts order identifiers from requests, but does not verify whether the caller has permission to cancel that order. As a...

Arizu Fast Tunnel permission permissions and access control issues

Arizu Fast Tunnel 1.0.0 version has a security vulnerability. This vulnerability stems from the improper handling of the pluginfile parameter in the ZipArchive::extractTo function within the Plugin Installer component. It may lead to unlimited file uploads...

Vite information leakage vulnerability

Vite versions from 8.3.0 to 8.3.3 and from 8.2.0 to 8.2.4, as well as vite-plus version 0.2.8 to 1.1.0, have security vulnerabilities. The vulnerability stems from the Wasm plugin load hook not applying the server.fs check. When processing requests containing the?vite-wasm-instance query, the...

FlexGet path traversal vulnerability

Versions of FlexGet prior to 3.20.7 have a path traversal vulnerability. This vulnerability stems from the decompress plugin, which has a path traversal flaw. Attackers can use feeds that contain zip or rar archives with "../ sequences or absolute paths" to write arbitrary files. This may result ...

Oracle MySQL Server security vulnerabilities

A security vulnerability exists in Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1; as well as in Oracle MySQL Cluster versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1. This vulnerability stems fr...

Security vulnerabilities in Oracle WebLogic Server Proxy Plugin

Versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 of the Oracle WebLogic Server Proxy Plugin contain a security vulnerability. This vulnerability stems from issues within the WebLogic Server Proxy Plug-In for Third-Party Web Servers component. It may allow unauthenticated attackers to gain HTTP...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503 and 8u503-perf versions have security vulnerabilities. These vulnerabilities stem from issues with the Java plugin component. Exploitation by attackers with low privileges, after logging in to the infrastructure running Oracle Java SE, may lead to unauthorized creation,...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server, including the MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1; as well as MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, contain security vulnerabilities. These vulnerabilities stem from issues with t...

Oracle MySQL Server security vulnerabilities

A security vulnerability exists in Oracle MySQL Server within MySQL Cluster versions ranging from 8.4.0 to 8.4.12, from 9.7.0 to 9.7.3, and from 26.7.0 to 26.7.1. Additionally, a similar vulnerability is present in MySQL Cluster versions from 8.0.0 to 8.0.49, from 8.4.0 to 8.4.12, from 9.7.0 to...