Masteriyo LMS <= 1.7.2 - Unauthenticated Privilege Escalation

The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the updateloggedinuser function in all versions up to, and including, 1.7.2. This makes it possible for unauthenticated attackers t...

CVE-2026-53587 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53587 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-53584 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53584 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-53585 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53585 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-53586 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53586 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CLSA-2026-1783558964 TuxCare security update for shell-quote (1 CVE)

TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.7.2-tuxcare.2...

CLSA-2026-1777250306 TuxCare security update for org.jsoup:jsoup (2 CVEs)

TuxCare rebuilt org.jsoup:jsoup to address 2 CVEs. Fixed in 1.7.2-tuxcare.1...

CLSA-2026-1773879463 TuxCare security update for shell-quote (1 CVE)

TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.7.2-tuxcare.1...

CLEANSTART-2026-FP73805 Security fixes in trillian 1.7.2-r1

Package trillian version 1.7.2-r1 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27138, CVE-2026-27137, CVE-2026-27139...

CLEANSTART-2026-YB33858 Security fixes in trillian 1.7.2-r0

Package trillian version 1.7.2-r0 fixes 4 vulnerabilities: CVE-2025-61730, CVE-2025-61728, CVE-2025-61726, CVE-2025-68121...

CVE-2026-62995

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. in versions 1.7.1 and prior, joserfc accepts JWTs with trailing padding == which are not conforming to the JOSE specifications. This leads to malleability of the JWTs when...

EUVD-2026-50450

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. in versions 1.7.1 and prior, joserfc accepts JWTs with trailing padding == which are not conforming to the JOSE specifications. This leads to malleability of the JWTs when...

CVE-2026-62995 joserfc accepts JWT with padding, leading to JWT malleability

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. in versions 1.7.1 and prior, joserfc accepts JWTs with trailing padding == which are not conforming to the JOSE specifications. This leads to malleability of the JWTs when...

CVE-2026-62995 joserfc accepts JWT with padding, leading to JWT malleability

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. in versions 1.7.1 and prior, joserfc accepts JWTs with trailing padding == which are not conforming to the JOSE specifications. This leads to malleability of the JWTs when...

CVE-2026-62995 joserfc accepts JWT with padding, leading to JWT malleability

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. in versions 1.7.1 and prior, joserfc accepts JWTs with trailing padding == which are not conforming to the JOSE specifications. This leads to malleability of the JWTs when...

CVE-2026-62995

CVE-2026-62995 affects the Python library joserfc (versions ≤ 1.7.1). The issue: joserfc accepts JWTs with trailing padding (==), which is non-conforming to JOSE specs and enables JWT malleability when parsed by the library. Practical impact varies by deployment and could allow bypass of token re...

Important: Red Hat Security Advisory: Multicluster Global Hub 1.7.2 security update

Multicluster Global Hub v1.7.2 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

EUVD-2026-43745

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size...

CVE-2026-54433

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting XSS via a crafted plain-text email message. The attacker-controlled JavaScript executes within the victim's authenticated session simply by opening or previewing the message zero-click...

CVE-2026-54433

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting XSS via a crafted plain-text email message. The attacker-controlled JavaScript executes within the victim's authenticated session simply by opening or previewing the message zero-click...