84 matches found
CLSA-2026-1784769543 TuxCare security update for marked (3 CVEs)
TuxCare rebuilt marked to address 3 CVEs. Fixed in 0.3.19-tuxcare.1...
CLSA-2026-1784077496 TuxCare security update for org.grails (1 CVE)
TuxCare rebuilt 40 org.grails packages to address 1 CVE. Fixed in 2.5.6-tuxcare.1...
CLSA-2026-1783991056 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.31-tuxcare.9...
CLSA-2026-1783991065 TuxCare security update for org.apache.kafka (2 CVEs)
TuxCare rebuilt 56 org.apache.kafka packages to address 2 CVEs. Fixed in 3.7.1-tuxcare.1...
CLSA-2026-1783040452 TuxCare security update for @angular (13 CVEs)
TuxCare rebuilt 17 @angular packages to address 13 CVEs. Fixed in 12.2.0-tuxcare.3...
CLSA-2026-1782954040 TuxCare security update for @angular (20 CVEs)
TuxCare rebuilt 19 @angular packages to address 20 CVEs. Fixed in 7.2.0-tuxcare.1...
CLSA-2026-1780534263 TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 18 @angular packages to address 1 CVE. Fixed in 5.1.2-tuxcare.1...
CLSA-2026-1779238043 TuxCare security update for org.springframework.boot (1 CVE)
TuxCare rebuilt 76 org.springframework.boot packages to address 1 CVE. Fixed in 2.7.18-tuxcare.15...
CLSA-2026-1776386159 TuxCare security update for io.netty (6 CVEs)
TuxCare rebuilt 46 io.netty packages to address 6 CVEs. Fixed in 4.1.73.Final-tuxcare.1...
CLSA-2026-1775003155 TuxCare security update for io.projectreactor.netty (2 CVEs)
TuxCare rebuilt 4 io.projectreactor.netty packages to address 2 CVEs. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1773101690 TuxCare security update for org.bouncycastle (2 CVEs)
TuxCare rebuilt 12 org.bouncycastle packages to address 2 CVEs. Fixed in 1.64-tuxcare.1...
CVE-2026-16042
The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache-clearing actions, allowing any authenticated user, including Subscribers, to flush the site's caches and force repeated cache rebuilds...
CVE-2026-16042
The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache-clearing actions, allowing any authenticated user, including Subscribers, to flush the site's caches and force repeated cache rebuilds...
CVE-2026-16042 LWS Optimize < 3.4 - Subscriber+ Cache Deletion
The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache-clearing actions, allowing any authenticated user, including Subscribers, to flush the site's caches and force repeated cache rebuilds...
EUVD-2026-51942
The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache-clearing actions, allowing any authenticated user, including Subscribers, to flush the site's caches and force repeated cache rebuilds...
CVE-2026-16042
The LWS Optimize WordPress plugin, in versions prior to 3.4 , fails to perform a capability check on its cache-clearing actions. This security flaw allows any authenticated user, including those with low-level Subscriber privileges, to flush the site's caches. Such actions can force the system in...
CVE-2026-16042: Missing Authorization
The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache-clearing actions, allowing any authenticated user, including Subscribers, to flush the site's caches and force repeated cache rebuilds...
PT-2026-67089
Name of the Vulnerable Software and Affected Versions LWS Optimize versions prior to 3.4 Description The LWS Optimize WordPress plugin fails to perform a capability check on its cache-clearing actions. This allows any authenticated user, including those with Subscriber privileges, to flush the si...
javapackages-tools:201801 security update
ant-contrib 1.0-0.32.b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild 1.0-0.31.b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora27MassRebuild 1.0-0.30.b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora26MassRebuild 1.0-0.29.b3 - Rebuilt for...
Malicious Package
Overview confetti-rebuilds is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...