267936 matches found
PT-2026-133192
TuxCare rebuilt @babel/plugin-transform-destructuring to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
PT-2026-132660
TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
PT-2026-132533
TuxCare rebuilt @babel/plugin-transform-react-jsx-self to address 2 CVEs. Fixed in 7.24.5-tuxcare.1...
CVE-2026-110034: Improper Input Validation
The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a booking's total, allowing an unauthenticated visitor who knows a valid discount code to create a confirmed booking stored with a negative total...
PT-2026-118090
CoreDNS k8s external headless AXFR can emit an empty transfer batch that panics the transfer plugin in github.com/coredns/coredns...
PT-2026-130315
TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-131037
TuxCare rebuilt @babel/plugin-syntax-typescript to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
PT-2026-132657
TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
PT-2026-133043
TuxCare rebuilt @babel/plugin-transform-spread to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
PT-2026-133042
TuxCare rebuilt @babel/plugin-transform-spread to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
PT-2026-132527
TuxCare rebuilt @babel/plugin-transform-react-jsx-self to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
PT-2026-133148
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
PT-2026-132027
TuxCare rebuilt @babel/plugin-transform-unicode-regex to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
PT-2026-131689
TuxCare rebuilt @babel/plugin-transform-block-scoped-functions to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
CVE-2026-112306: Improper Neutralization of Special Elements used in an SQL Command
NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection quer...
CVE-2026-89286: Exposure of Sensitive Information to an Unauthorized Actor
The FormFlow for GoHighLevel GHL WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the publicly accessible uploads directory, allowing unauthenticated attackers to read its contents, which include connected-CRM identifiers and, on sites that have linked the...
PT-2026-133062
TuxCare rebuilt @babel/plugin-transform-for-of to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
PT-2026-133190
TuxCare rebuilt @babel/plugin-transform-destructuring to address 1 CVE. Fixed in 7.21.5-tuxcare.1...