EUVD-2026-54249

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 11.6.0 until 11.16.1, Mermaid Radar Diagrams allow arbitrary large values for the ticks parameter, which can cause high CPU usage and freeze the rendering webpage or JavaScript...

CVE-2026-54225 Apache CXF: Denial of Service attack via large attachments

Apache CXF allows to control the maximum attachment size via the "attachment-max-size". Prior to Apache CXF 4.2.3 and 4.1.8 and 3.6.12, there was no default placed on this size, meaning that a denial of service attack is possible if the user doesn't explicitly set the limit. Users should update t...

RHSA-2025:7118 Red Hat Security Advisory: osbuild and osbuild-composer security update

Bulletin has no description...

Photon OS 5.0: Rust PHSA-2023-5.0-91-0067

An update of the rust package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0067. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2024-5.0-91-0374

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0374. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CLSA-2026-1783558967 TuxCare security update for laravel/framework (1 CVE)

TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 9.52.21-p2+tuxcare...

CLSA-2026-1776731780 TuxCare security update for sockjs (4 CVEs)

TuxCare rebuilt sockjs to address 4 CVEs. Fixed in 0.3.19-tuxcare.1...

CLSA-2026-1776299672 TuxCare security update for postcss (3 CVEs)

TuxCare rebuilt postcss to address 3 CVEs. Fixed in 7.0.14-tuxcare.1...

CLSA-2026-1773101683 TuxCare security update for form-data (3 CVEs)

TuxCare rebuilt form-data to address 3 CVEs. Fixed in 0.2.0-tuxcare.1...

Cybozu Garoon vulnerable to cross-site scripting

Overview Scheduler in Cybozu Garoon provided by Cybozu, Inc contains the following vulnerability: Cross-Site Scripting CWE-79 - CVE-2026-57279 CyCDB-4148 Cybozu, Inc reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc coordinated under t...

OPENSUSE-SU-2026:11433-1 ImageMagick-7.1.2.28-2.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.28-2.1 package on the GA media of openSUSE Tumbleweed...

CLEANSTART-2026-MZ11582 Security fixes in velero-fips 1.17.1-r1

Package velero-fips version 1.17.1-r1 fixes 9 vulnerabilities: CVE-2025-61730, CVE-2025-61726, CVE-2025-61728, CVE-2025-68121, CVE-2026-27142...

CLEANSTART-2026-QN62418 Security fixes in opensearch-dashboards-fips 3.5.0-r0

Package opensearch-dashboards-fips version 3.5.0-r0 fixes 30 vulnerabilities: ghsa-jg4p-7fhp-p32p, ghsa-2w6w-674q-4c4q, ghsa-9cx6-37pm-9jff, ghsa-r5fr-rjxr-66jc, ghsa-3v7f-55p6-f55p...

CLEANSTART-2026-ND31418 Security fixes in percona-xtradb-cluster-operator 1.19.1-r1

Package percona-xtradb-cluster-operator version 1.19.1-r1 fixes 9 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CVE-2026-13305 Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability

Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers...

CVE-2026-13305 Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability

Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers...

CVE-2026-13305

Autel MaxiCharger AC Elite Home EV chargers are affected by CVE-2026-13305 due to improper verification of cryptographic signatures during software updates. The flaw in update image validation allows a physically present attacker to execute arbitrary code on the device with no authentication. Imp...

[SECURITY] Fedora 43 Update: perl-Mojolicious-9.48-1.fc43

Back in the early days of the web there was this wonderful Perl library called CGI, many people only learned Perl because of it. It was simple enough to get started without knowing much about the language and powerful enough to keep you going, learning by doing was much fun. While most of the...

CVE-2026-64711

CVE-2026-64711 affects Apple platforms where improper entitlement checks could allow an app to leak sensitive user information. Concrete details in the initial record specify the affected software versions and fixes: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Taho...

Openfire Administration Console - Authentication Bypass

Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup...