PT-2026-71109

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A repository publisher who lacks delete permissions may be able to modify protected package content under specific conditions, specifically by overwriting docker...

CVE-2026-14235

CVE-2026-14235 affects the Download Manager WordPress plugin before 3.3.62. The vulnerability arises because the temporary download token is not bound to the requesting session and is not expired promptly, turning it into a long-lived, multi-use, portable bearer token. This allows an attacker who...

MAL-2025-23263 Malicious code in integer-execute-shell-runtime-protected (npm)

The package integer-execute-shell-runtime-protected was found to contain malicious code...