CVE-2026-65913 DOMPurify before 3.3.2 Prototype Pollution via USE_PROFILES

DOMPurify before 3.3.2 contains a prototype pollution vulnerability in USEPROFILES mode that allows attackers to bypass attribute filtering by polluting Array.prototype properties. Attackers can set Array.prototype properties like onclick to true, causing DOMPurify to accept event handlers as...

CVE-2026-65913

DOMPurify before 3.3.2 contains a prototype pollution vulnerability in USEPROFILES mode that allows attackers to bypass attribute filtering by polluting Array.prototype properties. Attackers can set Array.prototype properties like onclick to true, causing DOMPurify to accept event handlers as...

CVE-2026-65913

DOMPurify prior to 3.3.2 is affected by a prototype pollution vulnerability in USE_PROFILES mode. An attacker can pollute Array.prototype properties (e.g., onclick) to bypass attribute filtering, causing DOMPurify to treat event handler attributes as allowed. This enables DOM-based XSS when sanit...

CVE-2026-61246

creationtimestamp| type| source ---|---|--- 2026-07-23 00:56:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbmwaws4w2b 2026-07-23 01:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbn6kcks22w 2026-07-23 01:48:05+00:00| seen|...

CVE-2026-60373

creationtimestamp| type| source ---|---|--- 2026-07-23 00:01:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbjuumq222d 2026-07-23 01:05:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbngwj6ip2i 2026-07-23 17:23:15+00:00| seen|...

CVE-2026-14881

creationtimestamp| type| source ---|---|--- 2026-07-22 20:55:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrb7ilrmpy2q 2026-07-22 21:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrb7qnhc6z2f 2026-07-24 04:46:08+00:00| seen|...

SUSE-SU-2026:22861-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues - CVE-2026-56375: Possible memory leak in ASHLAR coder when action fails bsc1271495. - CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files bsc1268878. - CVE-2026-61464: Heap...

CVE-2026-16606

creationtimestamp| type| source ---|---|--- 2026-07-22 16:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrark2prqu2z 2026-07-22 17:34:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mraub43hdv2a 2026-07-23 04:00:57+00:00| seen|...

CVE-2026-46738

creationtimestamp| type| source ---|---|--- 2026-07-22 16:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrargivajr22 2026-07-22 17:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrase5hjxy2m 2026-07-22 17:29:44+00:00| seen|...

CVE-2026-60785

creationtimestamp| type| source ---|---|--- 2026-07-22 15:05:10+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mralvna2i52l 2026-07-22 15:05:12+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116964242921793174 2026-07-23 17:47:02+00:00| seen|...

Security update for ImageMagick

This update for ImageMagick fixes the following issues CVE-2026-56375: possible memory leak in ASHLAR coder when action fails bsc1271495. CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title bsc1271496. CVE-2026-61859: policy bypass in script operation due to missing chec...

SUSE-SU-2026:3192-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues - CVE-2026-55628: policy bypass in concatenate operation due to missing checks bsc1270081. - CVE-2026-56362: heap buffer overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache bsc1271100. - CVE-2026-56366: ME...

CVE-2026-60926

creationtimestamp| type| source ---|---|--- 2026-07-22 12:01:51+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrabntkjs426 2026-07-22 12:01:52+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116963522069918531 2026-07-23 17:49:22+00:00| seen|...

CVE-2026-62549

creationtimestamp| type| source ---|---|--- 2026-07-22 00:00:42+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mr6zecaaiq2o 2026-07-22 01:35:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr76nusrgg2a 2026-07-22 14:18:04+00:00| seen|...

CVE-2026-64609

creationtimestamp| type| source ---|---|--- 2026-07-21 14:56:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr62xjh4kt2o 2026-07-21 15:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr655zsbrl2z 2026-07-21 17:11:49+00:00| seen|...

CVE-2026-65008

creationtimestamp| type| source ---|---|--- 2026-07-21 12:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr5tdbb5it2a 2026-07-21 13:16:52+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mr5vf2i2ek2c 2026-07-21 15:01:41+00:00| seen|...

CVE-2026-12588

creationtimestamp| type| source ---|---|--- 2026-07-21 08:56:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gt6mvbk2y 2026-07-21 08:56:24+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr5gtcmhly23...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-7342: RHODF 4.19.20 release DFBUGS-7332: Backport for 4.19 - GSSODFMCG noobaa-db-pg-cluster won't...

CVE-2025-8412

creationtimestamp| type| source ---|---|--- 2026-07-20 05:17:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2k5ssvac2u 2026-07-20 05:18:00+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2k5tfv2525...

CVE-2026-10051

creationtimestamp| type| source ---|---|--- 2026-07-20 05:17:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2k53gkmh2m 2026-07-20 05:17:38+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mr2k57hgfq2c...