CVE-2026-108100

HortusFox hortusfox-web before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint. Attackers can place subqueries in includeinfo, which PlantsModel::getSpecificInfo concatenates into t...

EUVD-2026-95821

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1.0...

CVE-2026-108125 WordPress Post Author Authenticated SQLi

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1.0...

CVE-2026-108125

The wp-post-author plugin is vulnerable to an SQL injection flaw due to the improper neutralization of special elements used in an SQL command. This security issue specifically affects wp-post-author version 4.0.0 prior to 4.1.0 . Exploitation of this vulnerability may result in high confidential...

CVE-2026-108125 WordPress Post Author Authenticated SQLi

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1.0...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iot-fips, plugin-barman-cloud-fips, litmus-chaos-operator-fips, crossplane-provider-aws-cloudformation-fips, crossplane-cli, nats-server, vexctl, crossplane-provider-aws-servicecatalog-fips, crossplane-provider-aws-wafregional-fips,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iot-fips, plugin-barman-cloud-fips, litmus-chaos-operator-fips, velero-plugin-for-alicloud, crossplane-provider-aws-cloudformation-fips, ollama-fips, crossplane-cli, nats-server, prometheus-statsd-exporter-fips, vexctl,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iot-fips, plugin-barman-cloud-fips, litmus-chaos-operator-fips, velero-plugin-for-alicloud, crossplane-provider-aws-cloudformation-fips, ollama-fips, crossplane-cli, nats-server, prometheus-statsd-exporter-fips, vexctl,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iot-fips, plugin-barman-cloud-fips, litmus-chaos-operator-fips, velero-plugin-for-alicloud, crossplane-provider-aws-cloudformation-fips, ollama-fips, crossplane-cli, nats-server, prometheus-statsd-exporter-fips, vexctl,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iot-fips, plugin-barman-cloud-fips, litmus-chaos-operator-fips, velero-plugin-for-alicloud, crossplane-provider-aws-cloudformation-fips, ollama-fips, crossplane-cli, nats-server, prometheus-statsd-exporter-fips, vexctl,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iot-fips, plugin-barman-cloud-fips, litmus-chaos-operator-fips, velero-plugin-for-alicloud, crossplane-provider-aws-cloudformation-fips, ollama-fips, crossplane-cli, nats-server, prometheus-statsd-exporter-fips, vexctl,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iot-fips, plugin-barman-cloud-fips, litmus-chaos-operator-fips, velero-plugin-for-alicloud, crossplane-provider-aws-cloudformation-fips, ollama-fips, crossplane-cli, nats-server, prometheus-statsd-exporter-fips, vexctl,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: goreleaser, cert-manager-istio-csr, kubernetes-csi-external-health-monitor, thanos-operator, cloud-provider-azure, nerdctl, net-kourier, dagger, gitlab-pages, nats-server, vexctl, azcopy, cert-exporter, q, terraform-provider-pagerduty, nri-nginx, buildah,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: goreleaser, cert-manager-istio-csr, kubernetes-csi-external-health-monitor, thanos-operator, cloud-provider-azure, nerdctl, net-kourier, dagger, gitlab-pages, nats-server, vexctl, azcopy, cert-exporter, q, terraform-provider-pagerduty, buildah, yunikorn-k8shim,...

CVE-2026-78660 vulnerabilities

Vulnerabilities for packages: goreleaser, cert-manager-istio-csr, kubernetes-csi-external-health-monitor, thanos-operator, cloud-provider-azure, nerdctl, net-kourier, dagger, gitlab-pages, nats-server, vexctl, azcopy, cert-exporter, q, nri-nginx, yunikorn-k8shim, grafana, grafana-mimir,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: goreleaser, cert-manager-istio-csr, kubernetes-csi-external-health-monitor, thanos-operator, cloud-provider-azure, nerdctl, net-kourier, dagger, gitlab-pages, nats-server, vexctl, azcopy, cert-exporter, q, nri-nginx, yunikorn-k8shim, grafana, grafana-mimir,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: goreleaser, cert-manager-istio-csr, kubernetes-csi-external-health-monitor, thanos-operator, cloud-provider-azure, nerdctl, net-kourier, dagger, gitlab-pages, nats-server, vexctl, azcopy, cert-exporter, q, terraform-provider-pagerduty, nri-nginx, buildah,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: goreleaser, cert-manager-istio-csr, kubernetes-csi-external-health-monitor, thanos-operator, cloud-provider-azure, nerdctl, net-kourier, dagger, gitlab-pages, nats-server, vexctl, azcopy, cert-exporter, q, terraform-provider-pagerduty, nri-nginx, buildah,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: goreleaser, cert-manager-istio-csr, kubernetes-csi-external-health-monitor, thanos-operator, cloud-provider-azure, nerdctl, net-kourier, dagger, gitlab-pages, nats-server, vexctl, azcopy, cert-exporter, q, terraform-provider-pagerduty, nri-nginx, buildah,...

CVE-2026-78663 vulnerabilities

Vulnerabilities for packages: goreleaser, cert-manager-istio-csr, kubernetes-csi-external-health-monitor, thanos-operator, cloud-provider-azure, nerdctl, net-kourier, dagger, gitlab-pages, nats-server, vexctl, azcopy, cert-exporter, q, terraform-provider-pagerduty, buildah, yunikorn-k8shim,...