PT-2026-1722

Name of the Vulnerable Software and Affected Versions Top Position Google Finance versions up to and including 0.1.0 Description The Top Position Google Finance plugin for WordPress is susceptible to Reflected Cross-Site Scripting due to inadequate input sanitization and output escaping. This...

CVE-2025-54999 OpenBao: Timing Side-Channel in Userpass Auth Method

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, when using OpenBao's userpass auth method, user enumeration was possible due to timing difference between non-existent users an...

@amishurinskiy/router (=1.0.0), @bluedrop_dev/configly (=4.0.2) +36 more potentially affected by CVE-2019-10750 via deeply (>=0.1.0 <=3.0.0)

deeply NPM version =0.1.0, =1.0.0, =1.1.1, =1.0.0, =0.2.1, =3.0.0, =1.0.0, =1.0.0, =2.0.0 - fabspa-js =0.5.0 and more Source cves: CVE-2019-10750 Source advisory: OSV:GHSA-8J4W-5FW4-RM27...