CVE-2026-9885 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6XX9-X287-3539 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-PPRH-65V6-VJR8 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XF76-HMQ4-V7QJ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6347-R2HX-J4HV vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-7W34-GVPM-FPJM vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-C7JH-HGV7-R6M2 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-J7C2-PHRM-27R8 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XV4H-X4CH-3XMH vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2VM7-4348-JV9F vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2X67-3HQQ-GFWQ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-W739-54JW-WCMF vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9980 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9934 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-6270

@fastify/middie versions 9.3.1 and earlier do not register inherited middleware directly on child plugin engine instances. When a Fastify application registers authentication middleware in a parent scope and then registers child plugins with @fastify/middie, the child scope does not inherit the...

CVE-2026-6631

A vulnerability was determined in Tenda F451 1.0.0.7cnsvn7958. Impacted is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter of the component httpd. Executing a manipulation of the argument page can lead to buffer overflow. The attack may be launched remotely. The...

CVE-2026-6866

CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials...

CVE-2026-42615

GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /recipe=ShowBase64offsets'%3Cscript substring...

CVE-2026-42930

When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restrictions on a BIG-IP system. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2026-42071

Mantis Bug Tracker MantisBT is an open source issue tracker. From 2.23.0 to 2.28.1, a missing authorization check in MantisBT's file visibility function allows any authenticated user REPORTER+ to download attachments on private bugnotes they should not be able to access, via the REST API endpoint...