267955 matches found
PT-2026-127330
TuxCare rebuilt @next/plugin-storybook to address 1 CVE. Fixed in 15.5.24-tuxcare.1...
PT-2026-125903
TuxCare rebuilt @babel/plugin-transform-exponentiation-operator to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
PT-2026-125905
TuxCare rebuilt @babel/plugin-transform-exponentiation-operator to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-125644
TuxCare rebuilt @next/eslint-plugin-next to address 2 CVEs. Fixed in 13.5.11-tuxcare.16...
PT-2026-127346
TuxCare rebuilt @next/plugin-storybook to address 9 CVEs. Fixed in 16.0.6-tuxcare.6...
PT-2026-125635
TuxCare rebuilt @next/eslint-plugin-next to address 9 CVEs. Fixed in 16.0.6-tuxcare.7...
PT-2026-125634
TuxCare rebuilt @next/eslint-plugin-next to address 9 CVEs. Fixed in 14.2.35-tuxcare.5...
PT-2026-127348
TuxCare rebuilt @next/plugin-storybook to address 1 CVE. Fixed in 14.2.35-tuxcare.8...
PT-2026-116353
Name of the Vulnerable Software and Affected Versions LearnPress – WordPress LMS Plugin for Create and Sell Online Courses versions prior to 4.4.11 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions...
PT-2026-127350
TuxCare rebuilt @next/plugin-storybook to address 1 CVE. Fixed in 16.0.6-tuxcare.9...
PT-2026-127349
TuxCare rebuilt @next/plugin-storybook to address 2 CVEs. Fixed in 13.5.11-tuxcare.16...
Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux (crlsa-2026_83544)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202683544 advisory. grafana: PLUGIN ARCHIVE EXTRACTION ESCAPES THE PLUGIN DIRECTORY, ALLOWING CODE EXECUTION CVE-2026-15815 Tenable has extracted the preceding description block...
PT-2026-126283
TuxCare rebuilt @vitejs/plugin-react to address 4 CVEs. Fixed in 3.2.11-tuxcare.2...
PT-2026-125640
TuxCare rebuilt @next/eslint-plugin-next to address 9 CVEs. Fixed in 16.0.6-tuxcare.6...
CVE-2026-92432: URL Redirection to Untrusted Site
The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL through a crafted link, which is useful for phishing...
CVE-2026-92433: Cross-Site Request Forgery (CSRF)
The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the integration to an attacker-controlled account via a crafted request CSRF, taking over the site's Patreon integration...
CVE-2026-107744: Missing Authorization
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible...
PT-2026-127336
TuxCare rebuilt @next/plugin-storybook to address 2 CVEs. Fixed in 15.5.23-tuxcare.2...
