PT-2026-124572

TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.16.7-tuxcare.1...

PT-2026-124578

TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

PT-2026-124542

TuxCare rebuilt @babel/plugin-transform-flow-strip-types to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

PT-2026-124551

TuxCare rebuilt @babel/plugin-transform-flow-strip-types to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

PT-2026-124556

TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.14.8-tuxcare.1...

PT-2026-124583

TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

PT-2026-124589

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.12.18-tuxcare.1...

PT-2026-124558

TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.12.5-tuxcare.1...

PT-2026-124559

TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

PT-2026-124560

TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

PT-2026-124562

TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

PT-2026-124565

TuxCare rebuilt @babel/plugin-transform-object-assign to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

PT-2026-124567

TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

PT-2026-125579

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

PT-2026-125584

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.23.9-tuxcare.3...

PT-2026-125587

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

PT-2026-125588

TuxCare rebuilt @babel/plugin-transform-runtime to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CVE-2026-109930: Exposure of Sensitive Information to an Unauthorized Actor

The MAIO WordPress plugin before 7.3.22 does not properly restrict access to its analytics data, treating a credential value shipped verbatim in its own public source as a valid API key, which allows unauthenticated attackers to retrieve the stored crawl-analytics log, including each recorded...

CVE-2026-91833: Improper Neutralization of Special Elements used in an SQL Command

The WX Subscribe 微信支付付费订阅 WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks on installs where the payment key has not been configured...

RockyLinux 8 : grafana (RLSA-2026:83544)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:83544 advisory. grafana: PLUGIN ARCHIVE EXTRACTION ESCAPES THE PLUGIN DIRECTORY, ALLOWING CODE EXECUTION CVE-2026-15815 Tenable has extracted the preceding description block...