CLSA-2026-1792440910 TuxCare security update for @babel/plugin-transform-regenerator (1 CVE)

TuxCare rebuilt @babel/plugin-transform-regenerator to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

CLSA-2026-1792440911 TuxCare security update for @babel/plugin-transform-regenerator (1 CVE)

TuxCare rebuilt @babel/plugin-transform-regenerator to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

CLSA-2026-1792438127 TuxCare security update for @babel/plugin-transform-classes (2 CVEs)

TuxCare rebuilt @babel/plugin-transform-classes to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

CLSA-2026-1792438126 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792438125 TuxCare security update for @babel/plugin-transform-classes (2 CVEs)

TuxCare rebuilt @babel/plugin-transform-classes to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792438128 TuxCare security update for @babel/plugin-transform-classes (2 CVEs)

TuxCare rebuilt @babel/plugin-transform-classes to address 2 CVEs. Fixed in 7.24.5-tuxcare.1...

CLSA-2026-1792438124 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.25.7-tuxcare.4...

CLSA-2026-1792438119 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

CLSA-2026-1792438118 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.24.5-tuxcare.2...

CLSA-2026-1792438116 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792438117 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792438115 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

CLSA-2026-1792438114 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

CLSA-2026-1792438112 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

CLSA-2026-1792438113 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

EUVD-2026-104585

Grav API plugin grav-plugin-api 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code sent to the unauthenticated GET /api/v1/translations/lang endpoint, and 1.0.16 before 1.0.42 fails to check target and destination page rules in the sync and batch copy...

CVE-2026-112779 Grav API Plugin before 1.0.42 Cache Exhaustion and Page Permission Bypass

Grav API plugin grav-plugin-api 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code sent to the unauthenticated GET /api/v1/translations/lang endpoint, and 1.0.16 before 1.0.42 fails to check target and destination page rules in the sync and batch copy...

CVE-2026-112779 Grav API Plugin before 1.0.42 Cache Exhaustion and Page Permission Bypass

Grav API plugin grav-plugin-api 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code sent to the unauthenticated GET /api/v1/translations/lang endpoint, and 1.0.16 before 1.0.42 fails to check target and destination page rules in the sync and batch copy...

CVE-2026-112779

The Grav API plugin (grav-plugin-api) versions 1.0.40 before 1.0.42 contains a vulnerability where the unauthenticated GET /api/v1/translations/{lang} endpoint caches a full translation dictionary for every well-formed language code. Unauthenticated attackers can exploit this via small requests t...

CVE-2026-112779

Grav API plugin grav-plugin-api 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code sent to the unauthenticated GET /api/v1/translations/lang endpoint, and 1.0.16 before 1.0.42 fails to check target and destination page rules in the sync and batch copy...