2026

justhtml versions before 1.13.0 contain a cross-site scripting vulnerability in the to_markdown() function when serializ

justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_st

justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkificatio

privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privi

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 1

Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-

Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without

The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being c

The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, a

The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, al

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the

A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function envSchema.parse of t

A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/

A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of t

A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability affects unknown code of

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affect

A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affe

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vul

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/ken

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function

A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the f

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub_41AD7C of the file /cgi-b

The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerab

The Security Hardener plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including,

The PPWP – Password Protect Pages plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS en

A vulnerability has been found in Systerel S2OPC up to 1.7.3. Impacted is the function SOPC_NodeMgtHelperInternal_AddVar

In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but no

The Infineon Airoc Wi-Fi driver's transmit callback airoc_mgmt_send() in drivers/wifi/infineon/airoc_wifi.c allocates a

In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_unlock regm

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check for tg ops in dce110_set_avm

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Skip sub-disable teardown for never-link

In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfs_server' during a FREE_STAT

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fix usercopy overflow in sn

In the Linux kernel, the following vulnerability has been resolved: xfs: handle NULL b_addr in xfs_buf_free When xfs_b

In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers already removed from by

In the Linux kernel, the following vulnerability has been resolved: bonding: alb: re-check primary_is_promisc under RTN

In the Linux kernel, the following vulnerability has been resolved: enic: fix tx_hang_reset use-after-free on device re

In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write in ip_vs_nat_icmp

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid hea

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak in btrfs_do_encoded_write()

In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertion errors in amdxdna_

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRM_LINK and

In the Linux kernel, the following vulnerability has been resolved: devlink: fix net namespace reference leak in reload

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fw_tracer, return NULL on create error T

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix locally exploitable BUG_ON in am

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix netns reference imbalance in conntrack kfu