CVE-2026-17824

Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66388

The GiveWP WordPress plugin before 4.16.3 does not escape a donation-form template setting before outputting it in an HTML attribute, allowing users with the GiveWP Worker role and above to inject arbitrary web scripts that execute on the public donation form viewed by any visitor...

CVE-2026-14318: Improper Neutralization of Input During Web Page Generation

The GiveWP WordPress plugin before 4.16.3 does not escape a donation-form template setting before outputting it in an HTML attribute, allowing users with the GiveWP Worker role and above to inject arbitrary web scripts that execute on the public donation form viewed by any visitor...

Malicious code in open-worker-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f401caae6648708b54670a92075c2ff4fa6fb10f86a7ad73be5fa19eacae2fed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11188 Malicious code in open-worker-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f401caae6648708b54670a92075c2ff4fa6fb10f86a7ad73be5fa19eacae2fed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview open-worker-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

The vulnerability of the cfids_invalidation_worker() function in the fs/smb/client/cached_dir.c module allows a hacker to trigger a service failure in Linux-based operating systems with SMB client support.

The vulnerability of the cfidsinvalidationworker function in the fs/smb/client/cacheddir.c module of the SMB client kernel in Linux operating systems is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Build Numbers and Versions of Veeam Plug-In for Platform9

This KB article lists all versions of the Veeam Plug-In for Platform9 and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for Platform9 1 Releases Veeam Plug-In for Platform9 1.0 Included with Veeam Backup & Replication 13.1 |...

Build Numbers and Versions of Veeam Plug-In for Verge OS

This KB article lists all versions of the Veeam Plug-In for Verge OS and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for Verge OS 1 Releases Veeam Plug-In for Verge OS 1.0 Included with Veeam Backup & Replication 13.1 | 13.1.0.1...

Build Numbers and Versions of Veeam Plug-In for Sangfor aSV

This KB article lists all versions of the Veeam Plug-In for Sangfor aSV and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for Sangfor aSV 1 Releases Veeam Plug-In for Sangfor aSV 1.0 Included withVeeam Backup & Replication 13.1 |...

Build Numbers and Versions of Veeam Plug-In for Xen

This KB article lists all versions of the Veeam Plug-In for Xen and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for Xen 1 Releases Veeam Plug-In for Xen 1.0 Included with Veeam Backup & Replication 13.1 | 13.1.0.295 | 2026-07-29...

DEBIAN-CVE-2026-50738

A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. The condition is reachable during normal replication operation, including by a...

CVE-2026-50735

pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting in an out-of-bounds read. A party acting as the publisher for a subscription, for example a non-PostgreSQL endpoint that speaks the pglogic...

CVE-2026-50738

A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. The condition is reachable during normal replication operation, including by a...

DEBIAN-CVE-2026-50735

pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting in an out-of-bounds read. A party acting as the publisher for a subscription, for example a non-PostgreSQL endpoint that speaks the pglogic...

CVE-2026-50738

A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. The condition is reachable during normal replication operation, including by a...

CVE-2026-50738

A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. The condition is reachable during normal replication operation, including by a...

CVE-2026-50735

pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting in an out-of-bounds read. A party acting as the publisher for a subscription, for example a non-PostgreSQL endpoint that speaks the pglogic...

UBUNTU-CVE-2026-50735

pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting in an out-of-bounds read. A party acting as the publisher for a subscription, for example a non-PostgreSQL endpoint that speaks the pglogic...

UBUNTU-CVE-2026-50738

A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. The condition is reachable during normal replication operation, including by a...