CLEANSTART-2026-YP46917 Security fixes in flux-image-reflector-controller-fips 1.1.2-r0

Package flux-image-reflector-controller-fips version 1.1.2-r0 fixes 2 vulnerabilities: CVE-2026-33186, CVE-2026-29181...

CVE-2026-40891 vulnerabilities

Vulnerabilities for packages: kubernetes-reflector...

GHSA-G94R-2VXG-569J vulnerabilities

Vulnerabilities for packages: kubernetes-reflector, promitor...

GHSA-MR8R-92FQ-PJ8P vulnerabilities

Vulnerabilities for packages: kubernetes-reflector...

CVE-2026-40894 vulnerabilities

Vulnerabilities for packages: kubernetes-reflector, promitor...

CVE-2026-40891 vulnerabilities

Vulnerabilities for packages: azure-functions-host, kubernetes-reflector...

CVE-2026-40894 vulnerabilities

Vulnerabilities for packages: azure-functions-host, kubernetes-reflector, promitor...

GHSA-G94R-2VXG-569J vulnerabilities

Vulnerabilities for packages: azure-functions-host, kubernetes-reflector, promitor...

GHSA-MR8R-92FQ-PJ8P vulnerabilities

Vulnerabilities for packages: azure-functions-host, kubernetes-reflector...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, dkron, fluxcd-kustomize-mutating-webhook, flux-source-controller, flux, smokescreen, nodetaint, gh, polaris, spire-server, go, local-path-provisioner, mountpoint-s3-csi-driver, dbmate, newrelic-infra-operator, newrelic-k8s-metadata-injection,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: node-problem-detector, rancher-webhook, vault-benchmark, rancher-system-upgrade-controller, polaris, rancher-helm, dbmate, trivy-operator, sftpgo-plugin-auth, nri-haproxy, incert, local-static-provisioner, kor, kubernetes-dashboard-auth,...

CVE-2026-24948

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Reflector reflector-plugins allows Reflected XSS.This issue affects Reflector: from n/a through = 1.2.2...

CVE-2026-24948

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Reflector reflector-plugins allows Reflected XSS.This issue affects Reflector: from n/a through = 1.2.2...

CVE-2026-24948

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Reflector reflector-plugins allows Reflected XSS.This issue affects Reflector: from n/a through = 1.2.2...

CVE-2026-24948

CVE-2026-24948 is a reflected XSS vulnerability in the WordPress plugin Reflector (fox-themes Reflector reflector-plugins) affecting versions up to and including 1.2.2. The issue arises from improper input neutralization during web page generation, enabling Reflected XSS. Public sources in connec...

CVE-2026-24948 WordPress Reflector plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Reflector reflector-plugins allows Reflected XSS.This issue affects Reflector: from n/a through = 1.2.2...

CVE-2026-24948 WordPress Reflector plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Reflector reflector-plugins allows Reflected XSS.This issue affects Reflector: from n/a through = 1.2.2...

WordPress plugin Reflector 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-21232

Name of the Vulnerable Software and Affected Versions fox-themes Reflector versions through 1.2.2 Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This issue impacts the Reflector...

WordPress Reflector plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Reflector versions = 1.2.2...