CVE-2026-113605

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

CVE-2026-113605 Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

CVE-2026-113605 Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

CVE-2026-113605 Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

CVE-2026-113605

Stirling-PDF versions 2.13.2 through 3.2.0 are vulnerable to an H2 SQL Denylist Bypass within the DatabaseService.validateSqlContent() function. Due to an incomplete denylist, authenticated administrators can use the import-database endpoint to upload a crafted SQL backup. By utilizing CREATE OR ...

EUVD-2026-105083

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

CLSA-2026-1792504886 TuxCare security update for @babel/helper-replace-supers (2 CVEs)

TuxCare rebuilt @babel/helper-replace-supers to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

CLSA-2026-1792504888 TuxCare security update for @babel/helper-replace-supers (1 CVE)

TuxCare rebuilt @babel/helper-replace-supers to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792504887 TuxCare security update for @babel/helper-replace-supers (2 CVEs)

TuxCare rebuilt @babel/helper-replace-supers to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792504885 TuxCare security update for @babel/helper-replace-supers (1 CVE)

TuxCare rebuilt @babel/helper-replace-supers to address 1 CVE. Fixed in 7.25.7-tuxcare.4...

CLSA-2026-1792504881 TuxCare security update for @babel/helper-replace-supers (1 CVE)

TuxCare rebuilt @babel/helper-replace-supers to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

CLSA-2026-1792504880 TuxCare security update for @babel/helper-replace-supers (1 CVE)

TuxCare rebuilt @babel/helper-replace-supers to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792504876 TuxCare security update for @babel/helper-replace-supers (1 CVE)

TuxCare rebuilt @babel/helper-replace-supers to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

CLSA-2026-1792504879 TuxCare security update for @babel/helper-replace-supers (1 CVE)

TuxCare rebuilt @babel/helper-replace-supers to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792504877 TuxCare security update for @babel/helper-replace-supers (1 CVE)

TuxCare rebuilt @babel/helper-replace-supers to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

CLSA-2026-1792504878 TuxCare security update for @babel/helper-replace-supers (1 CVE)

TuxCare rebuilt @babel/helper-replace-supers to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

CLSA-2026-1792504875 TuxCare security update for @babel/helper-replace-supers (1 CVE)

TuxCare rebuilt @babel/helper-replace-supers to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

PT-2026-118465

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

CentOS Linux 8 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (CENTOS-STREAM8:CLSA-2026:1791954698)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1791954698 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function...

Oracle Linux 8 : rsyslog (ELSA-2026-80817)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-80817 advisory. - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace function Resolves: RHEL-246632 Tenable has extracted the preceding description bloc...