115775 matches found
PYSEC-2026-148
Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with limited access to form pages could delete submissions to form pages they don't have access to by crafting a form submission to delete submissions on a page they do have access to f...
PYSEC-2026-148
Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with limited access to form pages could delete submissions to form pages they don't have access to by crafting a form submission to delete submissions on a page they do have access to f...
@hyorman/copilot-proxy-cli (1.0.4), @senoldogann/code-companion (>=0.1.38, <=0.1.56) +8 more potentially affected by CVE-2026-45033 via @github/copilot (>=1.0.12, <=1.0.40)
@github/copilot NPM version =1.0.12, =0.1.38, =0.12.6, =0.8.5, =0.6.0, =0.6.1, =0.6.8, =1.0.0, =2.0.0 - @vibe-forge/client 1.0.0 - bitbucket-copilot-pr-review 0.5.1 Source cves: CVE-2026-45033 Source advisory: OSV:GHSA-9CCR-R5HG-74GF...
@hyorman/copilot-proxy-cli (1.0.4), @senoldogann/code-companion (>=0.1.38, <=0.1.56) +8 more potentially affected by CVE-2026-45033 via @github/copilot (>=1.0.12, <=1.0.40)
@github/copilot NPM version =1.0.12, =0.1.38, =0.12.6, =0.8.5, =0.6.0, =0.6.1, =0.6.8, =1.0.0, =2.0.0 - @vibe-forge/client 1.0.0 - bitbucket-copilot-pr-review 0.5.1 Source cves: CVE-2026-45033 Source advisory: SNYK:JS-GITHUBCOPILOT-16642141...
Incorrect Behavior Order
Overview @github/copilot is a GitHub Copilot CLI brings the power of Copilot coding agent directly to your terminal. Affected versions of this package are vulnerable to Incorrect Behavior Order that enables code execution via the core.fsmonitor configuration key in a nested bare git repository. A...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44572 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44572 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44572 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44572 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44581 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44581 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44581 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44581 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44582 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44582 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44582 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44582 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44580 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44580 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44580 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44580 Source advisory:...
NPM: Next.js has cross-site scripting in beforeInteractive scripts with untrusted input
NPM: Next.js has cross-site scripting in beforeInteractive scripts with untrusted input vulnerability discovered by ? in WordPress Npm next versions = 13.0.0, 15.5.16...
-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1366 more potentially affected by CVE-2026-44579 via next (>=15.0.0, <=15.5.15)
next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44579 Source advisory: OSV:GHSA-MG66-MRH9-M8JX...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44579 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44579 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44578 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44578 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44576 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44576 Source advisory:...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44576 via next (>=16.0.0, <=16.2.4)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44576 Source advisory:...
NPM: Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes
NPM: Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes vulnerability discovered by ? in WordPress Npm next versions = 15.2.0, 15.5.16...