475432 matches found
CVE-2026-73428
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.18, Trix is vulnerable to stored cross-site scripting when crafted HTML is pasted into the editor. HTMLParser processes a mock attachment in a with an empty data-trix-attachment="" value, causing...
CVE-2026-73428
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.18, Trix is vulnerable to stored cross-site scripting when crafted HTML is pasted into the editor. HTMLParser processes a mock attachment in a with an empty data-trix-attachment="" value, causing...
EUVD-2026-58520
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.18, Trix is vulnerable to stored cross-site scripting when crafted HTML is pasted into the editor. HTMLParser processes a mock attachment in a with an empty data-trix-attachment="" value, causing...
Malicious code in eslint-generate-prerelease (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b3f1a7acd55a1642c9615fe72871781a6c0d6bea6f9d31aa42c700aa799704 Package ships an empty module index.js = 'module.exports = ;' under a name that resembles internal tooling, published at an inflated version 99.9.1 —...
MAL-2026-13979 Malicious code in eslint-generate-prerelease (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b3f1a7acd55a1642c9615fe72871781a6c0d6bea6f9d31aa42c700aa799704 Package ships an empty module index.js = 'module.exports = ;' under a name that resembles internal tooling, published at an inflated version 99.9.1 —...
MAL-2026-13980 Malicious code in eslint-generate-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4478598213eba844460a99bf323ef024e2fb906c918736cc7e593745029e16b4 [email protected] is a hollow package whose index.js exports an empty object and whose only effect on install is dependency resolution...
MAL-2026-13987 Malicious code in resolve-audit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b902b4dc4c2187bb95548ed903dfea70ea626ba5450f031c2cb27b3639dd1c [email protected] is a stub package index exports an empty object whose package.json declares its only dependency ltidisafe as a direct HTTPS...
MINI-686P-C639-HG28
Bulletin has no description...
MINI-PXX2-3P8Q-W353
Bulletin has no description...
MINI-4982-MMGX-GQXG
Bulletin has no description...
EUVD-2026-58366
IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...
MINI-89R4-PQ23-XMQG
Bulletin has no description...
MINI-75R4-287J-XJ6J
Bulletin has no description...
MINI-9VQF-7W2C-5JJ9
Bulletin has no description...
MINI-MQ7V-JF53-7RFC
Bulletin has no description...
MINI-V243-H9WW-VFR6
Bulletin has no description...
EUVD-2026-58360
IBM Planning Analytics 2.0, and 2.1 Local is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...
CVE-2026-73652
vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...
CVE-2026-73644
creationtimestamp| type| source ---|---|--- 2026-08-13 18:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msybmbk7el2u...
CVE-2026-73647 Quasar Framework: Prototype pollution in Quasar extend() utility
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the public extend utility in ui/src/utils/extend/extend.js recursively copied attacker-controlled object keys during extendtrue, target, source deep merges without rejecting an own proto propert...