CLSA-2026-1792545150 TuxCare security update for @babel/helper-string-parser (1 CVE)

TuxCare rebuilt @babel/helper-string-parser to address 1 CVE. Fixed in 7.25.7-tuxcare.4...

CLSA-2026-1792545145 TuxCare security update for @babel/helper-string-parser (1 CVE)

TuxCare rebuilt @babel/helper-string-parser to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792545147 TuxCare security update for @babel/helper-string-parser (2 CVEs)

TuxCare rebuilt @babel/helper-string-parser to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

CLSA-2026-1792545146 TuxCare security update for @babel/helper-string-parser (1 CVE)

TuxCare rebuilt @babel/helper-string-parser to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

CLSA-2026-1792545144 TuxCare security update for @babel/helper-string-parser (1 CVE)

TuxCare rebuilt @babel/helper-string-parser to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792545143 TuxCare security update for @babel/helper-string-parser (1 CVE)

TuxCare rebuilt @babel/helper-string-parser to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

PT-2026-134407

TuxCare rebuilt @babel/helper-string-parser to address 1 CVE. Fixed in 7.25.7-tuxcare.4...

PT-2026-134406

TuxCare rebuilt @babel/helper-string-parser to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

PT-2026-134402

TuxCare rebuilt @babel/helper-string-parser to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

PT-2026-134404

TuxCare rebuilt @babel/helper-string-parser to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

PT-2026-134405

TuxCare rebuilt @babel/helper-string-parser to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

PT-2026-134403

TuxCare rebuilt @babel/helper-string-parser to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

EUVD-2026-68765

Livewire DOM-based cross-site scripting during client-side state handling...

CVE-2026-81887

Livewire is a full-stack framework for Laravel. From 3.0.0-beta.1 until 3.8.3 and 4.3.4, the dot-notated query-string parser in js/plugins/history/index.js, including fromQueryString and insertDotNotatedValueIntoData, accepts the proto, constructor, and prototype path segments and creates inherit...

CVE-2026-81887 Livewire DOM-based cross-site scripting during client-side state handling

Livewire is a full-stack framework for Laravel. From 3.0.0-beta.1 until 3.8.3 and 4.3.4, the dot-notated query-string parser in js/plugins/history/index.js, including fromQueryString and insertDotNotatedValueIntoData, accepts the proto, constructor, and prototype path segments and creates inherit...

CVE-2026-81887 Livewire DOM-based cross-site scripting during client-side state handling

Livewire is a full-stack framework for Laravel. From 3.0.0-beta.1 until 3.8.3 and 4.3.4, the dot-notated query-string parser in js/plugins/history/index.js, including fromQueryString and insertDotNotatedValueIntoData, accepts the proto, constructor, and prototype path segments and creates inherit...

CVE-2026-81887

Livewire is a full-stack framework for Laravel. From 3.0.0-beta.1 until 3.8.3 and 4.3.4, the dot-notated query-string parser in js/plugins/history/index.js, including fromQueryString and insertDotNotatedValueIntoData, accepts the proto, constructor, and prototype path segments and creates inherit...

CVE-2026-81887

Livewire (a full-stack framework for Laravel) is affected by a DOM-based XSS in versions 3.0.0-beta.1 through 3.8.3 and 4.3.4. The root cause lies in the dot-notated query-string parser in js/plugins/history/index.js (functions fromQueryString() and insertDotNotatedValueIntoData()), which accepts...

PT-2026-83982

Name of the Vulnerable Software and Affected Versions Livewire versions 3.0.0-beta.1 through 3.8.2 Livewire versions 4.0.0 through 4.3.3 Description The dot-notated query-string parser in js/plugins/history/index.js, specifically within the fromQueryString and insertDotNotatedValueIntoData...

CVE-2026-82562

Summary When qs.parse is called with comma: true and throwOnLimitExceeded: true, a comma-separated value under a bracket-push key a=1,2,3,4 is split into an array without being compared against arrayLimit, while the same value under a flat key a=1,2,3,4, an indexed key a0=, a nested key ab=, or a...