CLEANSTART-2026-FP97062 Security fixes in argo-cd 3.3.5-r0

Package argo-cd version 3.3.5-r0 fixes 31 vulnerabilities: CVE-2026-42880, CVE-2026-45738, CVE-2026-45737, ghsa-3v3m-wc6v-x4x3, ghsa-h98r-wv3h-fr38...

CLEANSTART-2026-JV98871 Security fixes in argo-cd 3.3.5-r4

Package argo-cd version 3.3.5-r4 fixes 1 vulnerabilities: CVE-2026-2303...

EUVD-2026-48084

Unauthenticated Broken Access Control in Kit formerly ConvertKit = 3.3.5 versions...

CVE-2026-65472 WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Kit formerly ConvertKit = 3.3.5 versions...

CVE-2026-65472

CVE-2026-65472 concerns a vulnerability in the WordPress Kit (formerly ConvertKit) plugin for WordPress, affecting versions

CVE-2026-65472 WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Kit formerly ConvertKit = 3.3.5 versions...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.5

Updated Red Hat Enterprise Linux AI 3.3.5 container images are now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications. This update provides the latest Red Hat Enterprise...

WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Kit formerly ConvertKit versions = 3.3.5...

Critical: Red Hat Security Advisory: Red Hat AI Inference Server 3.3.5 (CUDA)

Red Hat AI Inference Server 3.3.5 CUDA is now available. Red Hat® AI Inference Server...

Critical: Red Hat Security Advisory: Red Hat AI Inference Server 3.3.5 (ROCm)

Red Hat AI Inference Server 3.3.5 ROCm is now available. Red Hat® AI Inference Server...

Critical: Red Hat Security Advisory: Red Hat AI Inference Server 3.3.5 (Spyre)

Red Hat AI Inference Server 3.3.5 Spyre is now available. Red Hat® AI Inference Server...

CVE-2024-37210

Missing Authorization vulnerability in ali2woo AliNext allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AliNext: from n/a through 3.3.5...

CVE-2024-37210

CVE-2024-37210 concerns WordPress AliExpress Dropshipping with AliNext Lite plugin

CVE-2024-37210 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in ali2woo AliNext allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AliNext: from n/a through 3.3.5...

CVE-2024-37210 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in ali2woo AliNext allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AliNext: from n/a through 3.3.5...

CVE-2018-25370 Admidio 3.3.5 Cross-Site Request Forgery via roles_function.php

Admidio 3.3.5 contains a cross-site request forgery vulnerability that allows low-privilege users to increase their permissions by exploiting improper origin checking. Attackers can craft malicious HTML forms targeting rolesfunction.php with parameters like rolassignroles, rolapproveusers, and...

CVE-2026-41419

4ga Boards is a boards system for realtime project management. Prior to 3.3.5, a path traversal vulnerability allows an authenticated user with board import privileges to make the server ingest arbitrary host files as board attachments during BOARDS archive import. Once imported, the file can be...

CVE-2026-41419

The CVE describes a path traversal vulnerability in 4ga Boards prior to version 3.3.5. An authenticated user with board import privileges can cause the server to ingest arbitrary host files as board attachments during a BOARDS archive import. Once imported, those files may be downloaded via the s...

CVE-2026-41419 4ga Boards: Import Path Traversal Leads to Arbitrary File Read

4ga Boards is a boards system for realtime project management. Prior to 3.3.5, a path traversal vulnerability allows an authenticated user with board import privileges to make the server ingest arbitrary host files as board attachments during BOARDS archive import. Once imported, the file can be...

CVE-2026-41418 4ga Boards: User Enumeration via Timing Side-Channel in Authentication Endpoint

4ga Boards is a boards system for realtime project management. Prior to 3.3.5, 4ga Boards is vulnerable to user enumeration via a timing side-channel in the login endpoint POST /api/access-tokens. When an invalid username/email is provided, the server responds immediately 17ms average. When a val...