CVE-2026-110010

The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.3 does not perform any capability or authentication check before allowing an unauthenticated request to re-run a legacy data migration, letting anyone revert a custom post type or taxonomy definition on sites upgraded from ...

EUVD-2026-108013

The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.3 does not perform any capability or authentication check before allowing an unauthenticated request to re-run a legacy data migration, letting anyone revert a custom post type or taxonomy definition on sites upgraded from ...

CVE-2026-114115

Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parseIfExp that reads nested arrays with narrower inner bounds using the wider result type's memory layout. When a ternary selects the narrower array, inner arrays after the first are read at wrong offsets, causing...

CVE-2026-114115

Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parseIfExp that reads nested arrays with narrower inner bounds using the wider result type's memory layout. When a ternary selects the narrower array, inner arrays after the first are read at wrong offsets, causing...

CVE-2026-114115 Vyper 0.3.8 through 0.5.0b1 Memory Misread via Ternary Nested Array Selection

Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parseIfExp that reads nested arrays with narrower inner bounds using the wider result type's memory layout. When a ternary selects the narrower array, inner arrays after the first are read at wrong offsets, causing...

CVE-2026-114115

Vyper versions 0.3.8 through 0.5.0b1 are affected by a compiler miscompilation vulnerability in parse_IfExp. The issue occurs when a ternary operator selects a nested array with narrower inner bounds, but the compiler uses the memory layout of the wider result type. This results in inner arrays a...

EUVD-2026-106918

Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parseIfExp that reads nested arrays with narrower inner bounds using the wider result type's memory layout. When a ternary selects the narrower array, inner arrays after the first are read at wrong offsets, causing...

PT-2026-120241

Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse IfExp that reads nested arrays with narrower inner bounds using the wider result type's memory layout. When a ternary selects the narrower array, inner arrays after the first are read at wrong offsets, causing...

CVE-2026-112786

OpenCATS versions before 0.10.0 are vulnerable to a missing authorization flaw in the ImportUI::handleRequest() function. This vulnerability allows authenticated users with low-level READ access to trigger the import module's revert action. By providing a specific importID, an attacker can perfor...

CVE-2026-112786 OpenCATS before 0.10.0 Missing Authorization via Import Revert Action

OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest that allows low-privileged authenticated users to roll back data imports. Attackers with READ-level access can request the import module's revert action with an importID to mass-delete imported...

EUVD-2026-102838

The Squeeze WordPress plugin before 1.8.1 does not perform a capability check on one of its AJAX actions, allowing authenticated users with a role as low as Subscriber to revert any attachment to its backup copy and to permanently delete that backup and the plugin's generated WebP derivatives,...

CVE-2026-110029 Squeeze < 1.8.1 - Subscriber+ Missing Authorization via squeeze_restore_attachment

The Squeeze WordPress plugin before 1.8.1 does not perform a capability check on one of its AJAX actions, allowing authenticated users with a role as low as Subscriber to revert any attachment to its backup copy and to permanently delete that backup and the plugin's generated WebP derivatives,...

CVE-2026-110029

The Squeeze WordPress plugin (versions before 1.8.1 ) is vulnerable to an authorization bypass due to a missing capability check on an AJAX action . This flaw allows authenticated users with Subscriber privileges or higher to revert any attachment to its backup copy. Furthermore, attackers can pe...

PT-2026-115580

Name of the Vulnerable Software and Affected Versions Squeeze versions prior to 1.8.1 Description An authorization flaw exists in the Squeeze WordPress plugin where a capability check is missing for an AJAX action. This allows authenticated users with roles as low as Subscriber to revert any...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: block: Do not revert the iterator for -EIOCBQUEUED. The blkdevreaditer function includes some unusual checks. For example, it checks whether the result is greater than or equal to zero before adjusting the position and count. Thi...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: “mm/writeback: fix possible divide-by-zero in wbdirtylimits, again” This issue was addressed by reverting to the previous behavior. The patch series “mm: Avoid possible overflows in dirty throttling” also addresses this issue. Th...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: “Revert ‘f2fs: fix to do sanity check on extent cache correctly’” The syzbot reports a bug in f2fs as follows: UBSAN: Array-index-out-of-bounds in fs/f2fs/f2fs.h:3275:19 Index 1409 is out of range for type ‘le32923’ aka ‘unsigned...

Vyper: Return inside for loop more than 1 level deep

VVE-2020-0002 Earlier today, we received a responsible disclosure of a potential issue from @michwill developer of @curvefi for Vyper users who use return statements inside for loops of nested internal calls. Returning inside a for loop causes an invalid jump dest, reverting the transaction...

GHSA-VG88-3V92-RJX2 Vyper: Return inside for loop more than 1 level deep

VVE-2020-0002 Earlier today, we received a responsible disclosure of a potential issue from @michwill developer of @curvefi for Vyper users who use return statements inside for loops of nested internal calls. Returning inside a for loop causes an invalid jump dest, reverting the transaction...

PT-2026-115982

VVE-2020-0002 Earlier today, we received a responsible disclosure of a potential issue from @michwill developer of @curvefi for Vyper users who use return statements inside for loops of nested internal calls. Returning inside a for loop causes an invalid jump dest, reverting the transaction...