2026

Yoast Duplicate Post through 4.6 contains a cross-site request forgery vulnerability in the duplicate_post_dismiss_notic

Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handli

Juicer through 1.12.18 fails to escape remote feed API response fields before rendering them on the admin settings page.

Easy Twitter Feeds before 1.2.13 contains a cross-site request forgery vulnerability in the duplicate_post action handle

Sharp is a content management framework built for Laravel as a package. From version 9.0.0 to before version 9.22.3, the

Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Fedify previously addressed SS

Russh is a Rust SSH client & server library. From version 0.34.0 to before version 0.61.0, several russh client and serv

Russh is a Rust SSH client & server library. From version 0.34.0-beta.1 to before version 0.61.0, russh did not enforce

Russh is a Rust SSH client & server library. From version 0.37.0 to before version 0.61.0, in the russh client keyboard-

Shopware is an open commerce platform. Prior to versions 6.6.10.18 and 6.7.10.1, an attacker is able to enumerate the us

Russh is a Rust SSH client & server library. From version 0.34.0-beta.1 to before version 0.61.0, the russh server authe

Russh is a Rust SSH client & server library. From version 0.34.0 to before version 0.61.1, when SSH compression is enabl

Kanidm is an identity management platform. Prior to version 1.9.3, a single unauthenticated GET to any /scim/v1/... endp

libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 15.0.23, three cooperating omissions

Russh is a Rust SSH client & server library. Prior to version 0.60.3, CryptoVec used unchecked capacity growth, unchecke

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Prior to version 1.6.0, the

SpiceDB is an open source database system for creating and managing security-critical application permissions. From vers

Plonky3 is a toolkit for polynomial IOPs (PIOPs). Prior to versions 0.4.3 and 0.5.3, an attacker controlling prover-side

JavaScript Cookie is a JavaScript API for handling cookies, client-side. Prior to version 3.0.7, js-cookie's internal as

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.2

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.2

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 16.2.6, an unauthenticated remote pee

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4

bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

Sharp is a content management framework built for Laravel as a package. Prior to version 9.22.0, Sharp exposes a generic

TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3

Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to versions 1.9.11, 1.10

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote a

An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allo

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a ma

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious br

An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex X

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypas

A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with a

A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a l

A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenti

A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an a

A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to route network traffi

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated admi

A person with access to a Mac may be able to bypass Login Window. A consistency issue was addressed with improved state

A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was a

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specia