Malicious code in tailwind-theme-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3a6ff1f2699ab0ea92a30416c4b043d70781bd4c7241c2fb497061a78866ab7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious Package

Overview bella-kupang97-riris is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview bella-lapis74-miaww is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-15846 Malicious code in tailwind-theme-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3a6ff1f2699ab0ea92a30416c4b043d70781bd4c7241c2fb497061a78866ab7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

PT-2026-55384

Summary A Server-Side Template Injection SSTI vulnerability exists in Mautic's theme engine. The platform renders uploaded Twig templates without a sandbox or strict function restrictions. Authenticated users with permissions to create or upload themes can abuse this to execute arbitrary code...

CVE-2026-9558

A Server-Side Template Injection SSTI vulnerability exists in Mautic's theme engine. The platform renders uploaded Twig templates without a sandbox or strict function restrictions. Authenticated users with permissions to create or upload themes can abuse this to execute arbitrary code on the...

CVE-2026-9558

A Server-Side Template Injection SSTI vulnerability exists in Mautic's theme engine. The platform renders uploaded Twig templates without a sandbox or strict function restrictions. Authenticated users with permissions to create or upload themes can abuse this to execute arbitrary code on the...

CVE-2026-9558

A Server-Side Template Injection SSTI vulnerability exists in Mautic's theme engine. The platform renders uploaded Twig templates without a sandbox or strict function restrictions. Authenticated users with permissions to create or upload themes can abuse this to execute arbitrary code on the...

CVE-2026-9558

A Server-Side Template Injection SSTI vulnerability exists in Mautic's theme engine. The platform renders uploaded Twig templates without a sandbox or strict function restrictions. Authenticated users with permissions to create or upload themes can abuse this to execute arbitrary code on the...

CVE-2026-9558: Improper Neutralization of Special Elements Used in a Template Engine

A Server-Side Template Injection SSTI vulnerability exists in Mautic's theme engine. The platform renders uploaded Twig templates without a sandbox or strict function restrictions. Authenticated users with permissions to create or upload themes can abuse this to execute arbitrary code on the...

PT-2026-44802

Name of the Vulnerable Software and Affected Versions Mautic versions prior to 7.1.2 Mautic versions prior to 6.0.9 Mautic versions prior to 5.2.11 Mautic versions prior to 4.4.20 Description A Server-Side Template Injection SSTI issue exists in the theme engine. The platform renders uploaded Twi...

WP eCommerce <= 3.11.3 - SQL Injection in sessionid

From vendor: "This vulnerability only affects users who use eWay as their payment gateway, have Gold Cart activated, and are using the as-of-yet-unreleased Theme Engine 2.0. We believe the number of users affected is likely close to zero, due to these conditions – but still, we highly recommend...

PT-2011-1768 · Gtk+ Team · Gtk+

Name of the Vulnerable Software and Affected Versions: GTK+ versions prior to 2.24.0 Description: The issue is related to an untrusted search path vulnerability in the modules/engines/ms-windows/xp theme.c module. This allows local users to gain privileges via a Trojan horse uxtheme.dll file in t...