PT-2026-127343

TuxCare rebuilt @next/plugin-storybook to address 5 CVEs. Fixed in 16.0.6-tuxcare.13...

PT-2026-127347

TuxCare rebuilt @next/plugin-storybook to address 9 CVEs. Fixed in 16.0.6-tuxcare.7...

PT-2026-125636

TuxCare rebuilt @next/eslint-plugin-next to address 1 CVE. Fixed in 16.0.6-tuxcare.9...

PT-2026-125642

TuxCare rebuilt @next/eslint-plugin-next to address 1 CVE. Fixed in 14.2.35-tuxcare.7...

PT-2026-125643

TuxCare rebuilt @next/eslint-plugin-next to address 1 CVE. Fixed in 14.2.35-tuxcare.8...

PT-2026-125647

TuxCare rebuilt @next/eslint-plugin-next to address 1 CVE. Fixed in 12.3.7-tuxcare.10...

PT-2026-125620

TuxCare rebuilt @next/eslint-plugin-next to address 1 CVE. Fixed in 14.2.35-tuxcare.9...

PT-2026-125621

TuxCare rebuilt @next/eslint-plugin-next to address 1 CVE. Fixed in 14.2.35-tuxcare.10...

PT-2026-125622

TuxCare rebuilt @next/eslint-plugin-next to address 1 CVE. Fixed in 15.5.25-tuxcare.1...

PT-2026-125623

TuxCare rebuilt @next/eslint-plugin-next to address 1 CVE. Fixed in 15.5.23-tuxcare.1...

PT-2026-125625

TuxCare rebuilt @next/eslint-plugin-next to address 1 CVE. Fixed in 15.5.26-tuxcare.1...

PT-2026-125628

TuxCare rebuilt @next/eslint-plugin-next to address 2 CVEs. Fixed in 15.5.24-tuxcare.2...

PT-2026-125630

TuxCare rebuilt @next/eslint-plugin-next to address 2 CVEs. Fixed in 15.5.23-tuxcare.2...

PT-2026-125904

TuxCare rebuilt @babel/plugin-transform-exponentiation-operator to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

PT-2026-125906

TuxCare rebuilt @babel/plugin-transform-exponentiation-operator to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

PT-2026-125908

TuxCare rebuilt @babel/plugin-transform-exponentiation-operator to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

PT-2026-125912

TuxCare rebuilt @babel/plugin-transform-exponentiation-operator to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

PT-2026-125645

TuxCare rebuilt @next/eslint-plugin-next to address 2 CVEs. Fixed in 13.5.11-tuxcare.18...

CVE-2026-109208: Improper Neutralization of Input During Web Page Generation

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'quantity REST / ordercomments checkout' parameter in all versions up to, and including, 4.4.10 due to insufficient input sanitization and output...

Amazon Linux 2023 : mariadb123, mariadb123-backup, mariadb123-client-utils (ALAS2023-2026-3237)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3237 advisory. A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the...