CVE-2026-66689

Unauthenticated Broken Access Control in Anti Spam and list cleaner AcyChecker = 2.0.0 versions...

CVE-2026-0289

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls...

CVE-2026-0290

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data...

CVE-2026-0290 Prisma Browser: Sensitive Information Disclosure Vulnerability

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data...

EUVD-2026-57704

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data...

CVE-2026-0290 Prisma Browser: Sensitive Information Disclosure Vulnerability

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data...

CVE-2026-0290

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data...

CVE-2026-0290

Technical details about CVE-2026-0290 are not publicly available in the provided documents. Monitor for updates; descriptions indicate an information disclosure in Prisma Browser Account Protection, but no affected versions, attack vectors, or remediation are specified.

CVE-2026-0289

CVE-2026-0289 is described as a security bypass in the Account Protection feature of Palo Alto Networks Prisma Browser. The available connected documents identify the affected product as Prisma Browser and reference a bypass of intended security controls, but do not provide concrete technical det...

CVE-2026-0289 Prisma Browser: Inappropriate Implementation in Account Protection

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls...

CVE-2026-0289 Prisma Browser: Inappropriate Implementation in Account Protection

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls...

EUVD-2026-57703

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls...

CVE-2026-0289

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls...

CVE-2026-67990

Technical details are not publicly available in the provided documents; monitor for updates.

CVE-2026-73413

Shescape is a simple shell escape library for JavaScript. From 2.1.11 until 2.1.14 and 3.0.1, the flag-protection loop in compose in src/internal/compose.js repeatedly joins and slices flag fragments when flagProtection is enabled, which is the default, making processing quadratic in input size...

CVE-2026-73413 Shescape: Quadratic-time denial of service in flag-protection

Shescape is a simple shell escape library for JavaScript. From 2.1.11 until 2.1.14 and 3.0.1, the flag-protection loop in compose in src/internal/compose.js repeatedly joins and slices flag fragments when flagProtection is enabled, which is the default, making processing quadratic in input size...

CVE-2026-73413

Shescape (JavaScript library) contains a quadratic-time denial-of-service vulnerability in the flag-protection path. From versions 2.1.11 through 2.1.14 and 3.0.1, the flag-protection loop in compose.js repeatedly joins and slices flag fragments when flagProtection is enabled (default), causing p...

CVE-2026-73413 Shescape: Quadratic-time denial of service in flag-protection

Shescape is a simple shell escape library for JavaScript. From 2.1.11 until 2.1.14 and 3.0.1, the flag-protection loop in compose in src/internal/compose.js repeatedly joins and slices flag fragments when flagProtection is enabled, which is the default, making processing quadratic in input size...

CVE-2026-72806

CVE-2026-72806 affects SiYuan versions before 3.7.4, where a vulnerability in the FilterViewByPublishAccess filter allows an authentication bypass. Unauthenticated readers can render attribute views and access password-protected document rows (titles, block IDs, column values) via renderAttribute...

CVE-2026-72806

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the FilterViewByPublishAccess filter that fails to check publish password protection when rendering attribute views and database rows. Unauthenticated readers can access password-protected document rows including...