CVE-2026-9029

CVE-2026-9029 affects Grafana’s Geomap panel (XYZ tile layer) where sanitizeTextPanelContent() runs on the raw template string before variable substitution via getTemplateSrv().replace(), allowing an Editor to inject an XSS payload into a textbox variable default value that executes for all dashb...

CVE-2026-9029 Stored XSS in the Geomap panel tile-layer attribution

A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile layer via a template variable. The script then executes in the browser of any user who views the affected dashboard stored cross-site scripting...

CVE-2026-9029

A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile layer via a template variable. The script then executes in the browser of any user who views the affected dashboard stored cross-site scripting...

CVE-2026-56424

MISP core contained multiple broken access-control flaws where authorization checks were performed against the wrong entity, or where ownership/editability checks were missing on write paths. In affected subsystems, a lower-privileged authenticated user with the relevant feature permission could...

EUVD-2026-38227

MISP core contained multiple broken access-control flaws where authorization checks were performed against the wrong entity, or where ownership/editability checks were missing on write paths. In affected subsystems, a lower-privileged authenticated user with the relevant feature permission could...

CVE-2026-50557: Improper Neutralization of Input During Web Page Generation

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22 and 19.2.22, an issue in the @angular/compiler and @angular/core packages allows bypassing element and attribute...

PT-2026-51379

Name of the Vulnerable Software and Affected Versions Gophish versions prior to 0.12.2 Description Authenticated users with the User role can cause a denial of service by uploading a specially crafted Office document as an email template attachment. The ApplyTemplate function in...

PT-2026-51308

Name of the Vulnerable Software and Affected Versions MISP core affected versions not specified Description Broken access-control flaws exist where authorization checks are performed against incorrect entities or ownership and editability checks are missing on write paths. This allows a...

Medium: python-mako

Issue Overview: Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path traversal when a URI starts with // e.g., //../../../secret.txt. The root cause is an inconsistency between two slash-stripping implementations. Any file readable by the...

CVE-2026-50146: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Astro is a web framework. Prior to 6.3.3, when a component uses a client: directive, Astro inserts named slot content into a data-astro-template attribute without HTML escaping the slot name allowing an attacker to break out of the attribute context and inject arbitrary HTML, resulting in reflect...

PT-2026-51321

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A sanitize-then-interpolate ordering bug exists in the geomap panel's XYZ tile layer. The sanitizeTextPanelContent function processes the raw template string...

Amazon Linux 2023 : python3-mako (ALAS2023-2026-1846)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1846 advisory. Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path traversal when a URI starts with // e.g., //../../../secret.txt. The root cause is an...

Cross-Site Scripting (XSS)

Angular is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to the Angular template compiler failing to apply the required sanitizer for sensitive native DOM properties used with two-way property bindings, which allows an attacker to bypass Angular's built-in DOM sanitization and...

org.http4k:http4k-format-argo (0.21.0), org.http4k:http4k-format-jackson (0.21.0) +2 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (0.21.0)

org.http4k:http4k-core MAVEN version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-format-argo 0.21.0 - org.http4k:http4k-format-jackson 0.21.0 - org.http4k:http4k-server-netty...

org.http4k:http4k-client-apache (0.22.0), org.http4k:http4k-contract (0.22.0) +6 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (0.22.0)

org.http4k:http4k-core MAVEN version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 0.22.0 - org.http4k:http4k-contract 0.22.0 - org.http4k:http4k-format-argo 0.22.0 ...

org.http4k:http4k-client-apache (1.1.0), org.http4k:http4k-contract (1.1.0) +6 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.1.0)

org.http4k:http4k-core MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.1.0 - org.http4k:http4k-contract 1.1.0 - org.http4k:http4k-format-argo 1.1.0 -...

org.http4k:http4k-client-apache (1.4.0), org.http4k:http4k-contract (1.4.0) +6 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.4.0)

org.http4k:http4k-core MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.4.0 - org.http4k:http4k-contract 1.4.0 - org.http4k:http4k-format-argo 1.4.0 -...

org.http4k:http4k-client-apache (1.8.0), org.http4k:http4k-contract (1.8.0) +6 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.8.0)

org.http4k:http4k-core MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.8.0 - org.http4k:http4k-contract 1.8.0 - org.http4k:http4k-format-argo 1.8.0 -...

org.http4k:http4k-client-apache (1.9.0), org.http4k:http4k-contract (1.9.0) +6 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.9.0)

org.http4k:http4k-core MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.9.0 - org.http4k:http4k-contract 1.9.0 - org.http4k:http4k-format-argo 1.9.0 -...

org.http4k:http4k-client-apache (1.10.0), org.http4k:http4k-contract (1.10.0) +6 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.10.0)

org.http4k:http4k-core MAVEN version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.10.0 - org.http4k:http4k-contract 1.10.0 - org.http4k:http4k-format-argo 1.10.0 ...