SUSE CVE-2026-74971

Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

CVE-2026-74951

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue in Firefox for Android...

PT-2026-79325

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.20.0.0 through 4.20.3.0 Apache CloudStack versions 4.21.0.0 through 4.22.1.0 Description Improper encoding or escaping of output in the UI occurs when using the Lock User functionality, leading to a Cross-Site...

CVE-2026-61399: Improper Encoding or Escaping of Output

Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Lock User Functionality. This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later,...

PT-2026-79324

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.15.1.0 through 4.20.3.0 Apache CloudStack versions 4.21.0.0 through 4.22.1.0 Description Improper encoding or escaping of output in the user interface occurs when using the Instance Reset Password functionality. Th...

CVE-2026-74971

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component...

CVE-2026-54505

TREK is a collaborative travel planner. Prior to 3.1.0, when the Journey add-on is enabled, TREK interpolates the unescaped activeSuggestion.title value into journey.frontpage.suggestionText through client/src/i18n/TranslationContext.tsx and renders the result with dangerouslySetInnerHTML in...

CVE-2026-54505 TREK: Stored cross-user HTML injection via trip title in the Journey suggestion banner

TREK is a collaborative travel planner. Prior to 3.1.0, when the Journey add-on is enabled, TREK interpolates the unescaped activeSuggestion.title value into journey.frontpage.suggestionText through client/src/i18n/TranslationContext.tsx and renders the result with dangerouslySetInnerHTML in...

@docyrus/ui-pro-ai-assistant (>=0.8.4, <=0.12.9) potentially affected by CVE-2026-65842 via @platejs/docx-io (53.1.0)

@platejs/docx-io NPM version 53.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @platejs/docx-io and may be impacted: - @docyrus/ui-pro-ai-assistant =0.8.4, =0.12.9 Source cves: CVE-2026-65842 Source advisory: SNYK:JS-PLATEJSDOCXIO-19233388...

CVE-2026-64730

A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues. Mitigation Do not visit untrusted websites or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...

@n8n-plus/n8n-plus (2.32.7), n8n (>=2.32.0, <=2.33.3) potentially affected by CVE-2026-77075 via n8n-editor-ui (>=2.32.0, <=2.33.1)

n8n-editor-ui NPM version =2.32.0, =2.32.0, =2.33.3 Source cves: CVE-2026-77075 Source advisory: SNYK:JS-N8NEDITORUI-20186638...

Arbitrary Code Injection

Overview n8n-editor-ui is a Workflow Editor UI for n8n Affected versions of this package are vulnerable to Arbitrary Code Injection in the editor's resource locator link preview rendering, which inserts stored field values into URL templates without sanitizing them, so expression syntax held in a...

[SECURITY] [DSA 6454-1] sabnzbdplus security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6454-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 20, 2026 https://www.debian.org/security/faq -...

@docyrus/ui-pro-ai-assistant (>=0.0.1, <=0.12.9), @oyat/editor (>=1.7.9, <=1.8.6) potentially affected by CVE-2026-65842 via @platejs/docx-io (>=52.2.0, <=53.1.0)

@platejs/docx-io NPM version =52.2.0, =0.0.1, =1.7.9, =1.8.6 Source cves: CVE-2026-65842 Source advisory: MEND:CVE-2026-65842...

Malicious code in create-react-app-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad9d14917da2cd3e79a2885cdb25d2009133fb55f9ed4bead87e677f64f7816 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14325 Malicious code in create-react-app-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad9d14917da2cd3e79a2885cdb25d2009133fb55f9ed4bead87e677f64f7816 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious Package

Overview create-react-app-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

opencode v1.18.19

The open source AI coding agent. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt Installation root@kitploit: YOLO curl -fsSL...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, zot, descheduler, keda, argocd-image-updater, flux-notification-controller, k3s, kapp-controller, cluster-api-provider-vsphere, cass-operator, cloud-provider-gcp-cloud-controller-manager, gitlab-kas, kubeflow-pipelines, hubble-ui, rancher-agen...

EUVD-2026-62941

In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive AWS credentials by invoking an action that accepts the credentials parameter, because the parameter is not masked and is shown in cleartext in the user...