CLSA-2026-1772496680 TuxCare security update for requests (1 CVE)

TuxCare rebuilt requests to address 1 CVE. Fixed in 2.31.0.post1+tuxcare...

CLSA-2026-1772410252 TuxCare security update for flask (1 CVE)

TuxCare rebuilt flask to address 1 CVE. Fixed in 2.2.1.post1+tuxcare...

CLSA-2026-1771978232 TuxCare security update for 38 packages (1 CVE)

TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.90-tuxcare.3...

CLSA-2026-1771546208 TuxCare security update for braces (1 CVE)

TuxCare rebuilt braces to address 1 CVE. Fixed in 2.3.2-tuxcare.1...

CLSA-2026-1767917315 TuxCare security update for 13 packages (1 CVE)

TuxCare rebuilt 13 packages to address 1 CVE. Fixed in 4.3.11.Final-tuxcare.1...

CLSA-2025-1763338014 TuxCare security update for 38 packages (10 CVEs)

TuxCare rebuilt 38 packages to address 10 CVEs. Fixed in 9.0.90-tuxcare.1...

CLSA-2025-1766362095 TuxCare security update for 39 packages (12 CVEs)

TuxCare rebuilt 39 packages to address 12 CVEs. Fixed in 9.0.100-tuxcare.1...

CLSA-2025-1763597219 TuxCare security update for com.squareup.okio (1 CVE)

TuxCare rebuilt 4 com.squareup.okio packages to address 1 CVE. Fixed in 2.10.0-tuxcare.1...

CLSA-2025-1765930090 TuxCare security update for 38 packages (9 CVEs)

TuxCare rebuilt 38 packages to address 9 CVEs. Fixed in 9.0.75-tuxcare.2...

CLSA-2025-1764634061 TuxCare security update for commons-io:commons-io (1 CVE)

TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.5-tuxcare.1...

CLSA-2025-1760313987 TuxCare security update for org.springframework.webflow (2 CVEs)

TuxCare rebuilt 5 org.springframework.webflow packages to address 2 CVEs. Fixed in 2.3.1.RELEASE-tuxcare.1...

CLSA-2025-1753056170 TuxCare security update for 35 packages (1 CVE)

TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100.tuxcare.2...

CLSA-2025-1738627240 TuxCare security update for org.springframework.boot (1 CVE)

TuxCare rebuilt 76 org.springframework.boot packages to address 1 CVE. Fixed in 2.7.18.tuxcare.4...

PYSEC-2026-3611 pypdf: Possible large memory usage for wrong image dimensions

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading images where the declared size values are much too large compared to the actual data. Patches This has been fixed in pypdf==6.14.0. Workarounds If you cannot upgrade yet, consid...

WordPress Travel & Tours Meta Search plugin <= 2.3 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by CraCkEr in WordPress Plugin Flights & Hotels Booking WP Plugin versions = 2.3...

CVE-2026-16069

The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted through one of its AJAX actions before storing them and later echoing them into HTML attributes in the post editor's Featured Image meta box, allowing users with the Contributor...

EUVD-2026-52594

The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted through one of its AJAX actions before storing them and later echoing them into HTML attributes in the post editor's Featured Image meta box, allowing users with the Contributor...

CVE-2026-16069 Brizy - Page Builder < 2.8.19 - Contributor+ Stored XSS via Featured Image Focal Point

The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted through one of its AJAX actions before storing them and later echoing them into HTML attributes in the post editor's Featured Image meta box, allowing users with the Contributor...

CVE-2026-16069

The Brizy WordPress plugin, in versions prior to 2.8.19 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to sanitize or escape featured-image focal-point coordinates submitted via an AJAX action before they are stored and subsequently echoed into HTML attribute...

CVE-2026-16069

The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted through one of its AJAX actions before storing them and later echoing them into HTML attributes in the post editor's Featured Image meta box, allowing users with the Contributor...