295338 matches found
PT-2026-125638
TuxCare rebuilt @next/eslint-plugin-next to address 2 CVEs. Fixed in 15.5.23-tuxcare.4...
PT-2026-125640
TuxCare rebuilt @next/eslint-plugin-next to address 9 CVEs. Fixed in 16.0.6-tuxcare.6...
PT-2026-125635
TuxCare rebuilt @next/eslint-plugin-next to address 9 CVEs. Fixed in 16.0.6-tuxcare.7...
PT-2026-125905
TuxCare rebuilt @babel/plugin-transform-exponentiation-operator to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-125909
TuxCare rebuilt @babel/plugin-transform-exponentiation-operator to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
PT-2026-125911
TuxCare rebuilt @babel/plugin-transform-exponentiation-operator to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
PT-2026-125903
TuxCare rebuilt @babel/plugin-transform-exponentiation-operator to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
PT-2026-127348
TuxCare rebuilt @next/plugin-storybook to address 1 CVE. Fixed in 14.2.35-tuxcare.8...
PT-2026-127349
TuxCare rebuilt @next/plugin-storybook to address 2 CVEs. Fixed in 13.5.11-tuxcare.16...
PT-2026-127350
TuxCare rebuilt @next/plugin-storybook to address 1 CVE. Fixed in 16.0.6-tuxcare.9...
CVE-2026-92432: URL Redirection to Untrusted Site
The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL through a crafted link, which is useful for phishing...
CVE-2026-92433: Cross-Site Request Forgery (CSRF)
The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the integration to an attacker-controlled account via a crafted request CSRF, taking over the site's Patreon integration...
CVE-2026-107744: Missing Authorization
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible...
PT-2026-127346
TuxCare rebuilt @next/plugin-storybook to address 9 CVEs. Fixed in 16.0.6-tuxcare.6...
PT-2026-127330
TuxCare rebuilt @next/plugin-storybook to address 1 CVE. Fixed in 15.5.24-tuxcare.1...
Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux (crlsa-2026_83544)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202683544 advisory. grafana: PLUGIN ARCHIVE EXTRACTION ESCAPES THE PLUGIN DIRECTORY, ALLOWING CODE EXECUTION CVE-2026-15815 Tenable has extracted the preceding description block...
PT-2026-126283
TuxCare rebuilt @vitejs/plugin-react to address 4 CVEs. Fixed in 3.2.11-tuxcare.2...
CLSA-2026-1792194448 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)
TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.18.9-tuxcare.3...