267936 matches found
PT-2026-132522
TuxCare rebuilt @babel/plugin-transform-typescript to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
PT-2026-133159
TuxCare rebuilt @babel/plugin-transform-block-scoping to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
PT-2026-133189
TuxCare rebuilt @babel/plugin-transform-destructuring to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-133172
TuxCare rebuilt @babel/plugin-transform-private-property-in-object to address 1 CVE. Fixed in 7.24.5-tuxcare.2...
Malicious code in animatecss-tailwind-luminary (npm)
animatecss-tailwind-luminary 2.0.6, 2.0.7 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by cypherbyte on 2026-09-28. src/motion.js:5 requires the private scoped...
PT-2026-130317
TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
PT-2026-132659
TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
PT-2026-117630
Name of the Vulnerable Software and Affected Versions Grav API plugin grav-plugin-api versions 1.0.16 through 1.0.41 Description The plugin contains two distinct issues. First, the unauthenticated GET '/api/v1/translations/lang' endpoint caches a full translation dictionary for every well-formed...
CVE-2026-112779: Allocation of Resources Without Limits or Throttling
Grav API plugin grav-plugin-api 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code sent to the unauthenticated GET /api/v1/translations/lang endpoint, and 1.0.16 before 1.0.42 fails to check target and destination page rules in the sync and batch copy...
CVE-2026-112188: Exposure of Sensitive Information to an Unauthorized Actor
MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted. The settings lookup function resolves a dotted setting name to a node in the configuration tree. When a branch name such...
PT-2026-133170
TuxCare rebuilt @babel/plugin-transform-private-property-in-object to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-133090
TuxCare rebuilt @babel/plugin-transform-regenerator to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
PT-2026-133152
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
PT-2026-132655
TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-133199
TuxCare rebuilt @babel/plugin-transform-destructuring to address 2 CVEs. Fixed in 7.24.5-tuxcare.1...
PT-2026-118082
containerd CRI plugin: Checkpoint restore bypasses destination security context in github.com/containerd/containerd...
PT-2026-132529
TuxCare rebuilt @babel/plugin-transform-react-jsx-self to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-133094
TuxCare rebuilt @babel/plugin-transform-regenerator to address 1 CVE. Fixed in 7.16.7-tuxcare.3...