Skip to content

Commit 159900b

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-g7mr-vm94-3rv7 GHSA-cp69-4955-vphq GHSA-g2qr-3mxm-86jj GHSA-g6qw-3gmw-m78m GHSA-grpw-jgrw-ccqr GHSA-h253-w6v9-xv2v GHSA-xv6h-r36f-3gp5
1 parent da53c7d commit 159900b

7 files changed

Lines changed: 203 additions & 3 deletions

File tree

‎advisories/unreviewed/2025/11/GHSA-g7mr-vm94-3rv7/GHSA-g7mr-vm94-3rv7.json‎

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-g7mr-vm94-3rv7",
4-
"modified": "2026-03-17T18:30:28Z",
4+
"modified": "2026-03-18T06:31:19Z",
55
"published": "2025-11-18T21:32:31Z",
66
"aliases": [
77
"CVE-2025-61662"
@@ -43,6 +43,14 @@
4343
"type": "WEB",
4444
"url": "https://access.redhat.com/errata/RHSA-2026:4760"
4545
},
46+
{
47+
"type": "WEB",
48+
"url": "https://access.redhat.com/errata/RHSA-2026:4822"
49+
},
50+
{
51+
"type": "WEB",
52+
"url": "https://access.redhat.com/errata/RHSA-2026:4823"
53+
},
4654
{
4755
"type": "WEB",
4856
"url": "https://access.redhat.com/errata/RHSA-2026:4830"

‎advisories/unreviewed/2026/03/GHSA-cp69-4955-vphq/GHSA-cp69-4955-vphq.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-cp69-4955-vphq",
4+
"modified": "2026-03-18T06:31:20Z",
5+
"published": "2026-03-18T06:31:20Z",
6+
"aliases": [
7+
"CVE-2026-1926"
8+
],
9+
"details": "The Subscriptions for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `wps_sfw_admin_cancel_susbcription()` function in all versions up to, and including, 1.9.2. This is due to the function being hooked to the `init` action without any authentication or authorization checks, and only performing a non-empty check on the nonce parameter without actually validating it via `wp_verify_nonce()`. This makes it possible for unauthenticated attackers to cancel any active WooCommerce subscription by sending a crafted GET request with an arbitrary nonce value via the `wps_subscription_id` parameter.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1926"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://plugins.trac.wordpress.org/browser/subscriptions-for-woocommerce/tags/1.9.0/admin/class-subscriptions-for-woocommerce-admin.php#L831"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://plugins.trac.wordpress.org/browser/subscriptions-for-woocommerce/tags/1.9.0/includes/class-subscriptions-for-woocommerce.php#L248"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://plugins.trac.wordpress.org/browser/subscriptions-for-woocommerce/trunk/admin/class-subscriptions-for-woocommerce-admin.php#L831"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://plugins.trac.wordpress.org/browser/subscriptions-for-woocommerce/trunk/includes/class-subscriptions-for-woocommerce.php#L248"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3470887%40subscriptions-for-woocommerce%2Ftrunk&old=3449291%40subscriptions-for-woocommerce%2Ftrunk&sfp_email=&sfph_mail="
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/eabfdf29-eca9-4e4b-b809-23a83f5a91ac?source=cve"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-862"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2026-03-18T04:17:14Z"
55+
}
56+
}

‎advisories/unreviewed/2026/03/GHSA-g2qr-3mxm-86jj/GHSA-g2qr-3mxm-86jj.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-g2qr-3mxm-86jj",
4+
"modified": "2026-03-18T06:31:20Z",
5+
"published": "2026-03-18T06:31:20Z",
6+
"aliases": [
7+
"CVE-2026-4366"
8+
],
9+
"details": "A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests. This behavior allows an attacker to trick the server into making unintended requests to internal or restricted resources. As a result, sensitive internal services such as cloud metadata endpoints could be accessed. This issue may lead to information disclosure and enable attackers to map internal network infrastructure.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4366"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://access.redhat.com/security/cve/CVE-2026-4366"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448543"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-918"
34+
],
35+
"severity": "MODERATE",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-03-18T04:17:32Z"
39+
}
40+
}

‎advisories/unreviewed/2026/03/GHSA-g6qw-3gmw-m78m/GHSA-g6qw-3gmw-m78m.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-g6qw-3gmw-m78m",
4-
"modified": "2026-03-18T00:30:54Z",
4+
"modified": "2026-03-18T06:31:19Z",
55
"published": "2026-03-18T00:30:54Z",
66
"aliases": [
77
"CVE-2026-21994"
@@ -19,6 +19,10 @@
1919
"type": "ADVISORY",
2020
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21994"
2121
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.oracle.com/security-alerts/all-oracle-cves-outside-other-oracle-public-documents.html"
25+
},
2226
{
2327
"type": "WEB",
2428
"url": "https://www.oracle.com/security-alerts/public-vuln-to-advisory-mapping.html"

‎advisories/unreviewed/2026/03/GHSA-grpw-jgrw-ccqr/GHSA-grpw-jgrw-ccqr.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-grpw-jgrw-ccqr",
4-
"modified": "2026-03-18T00:30:54Z",
4+
"modified": "2026-03-18T06:31:19Z",
55
"published": "2026-03-17T15:36:23Z",
66
"aliases": [
77
"CVE-2026-3888"
@@ -38,6 +38,10 @@
3838
{
3939
"type": "WEB",
4040
"url": "https://ubuntu.com/security/notices/USN-8102-1"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "http://www.openwall.com/lists/oss-security/2026/03/18/1"
4145
}
4246
],
4347
"database_specific": {

‎advisories/unreviewed/2026/03/GHSA-h253-w6v9-xv2v/GHSA-h253-w6v9-xv2v.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-h253-w6v9-xv2v",
4+
"modified": "2026-03-18T06:31:19Z",
5+
"published": "2026-03-18T06:31:19Z",
6+
"aliases": [
7+
"CVE-2026-1780"
8+
],
9+
"details": "The [CR]Paid Link Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in all versions up to, and including, 0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1780"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://plugins.trac.wordpress.org/log/crpaid-link-manager/tags?rev=3479722"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e5b00388-48b8-4e82-ab52-1cd3d02177b7?source=cve"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-79"
34+
],
35+
"severity": "MODERATE",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-03-18T04:17:14Z"
39+
}
40+
}

‎advisories/unreviewed/2026/03/GHSA-xv6h-r36f-3gp5/GHSA-xv6h-r36f-3gp5.json‎

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-xv6h-r36f-3gp5",
4+
"modified": "2026-03-18T06:31:20Z",
5+
"published": "2026-03-18T06:31:20Z",
6+
"aliases": [
7+
"CVE-2026-2575"
8+
],
9+
"details": "A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service (DoS) by sending a highly compressed SAMLRequest through the SAML Redirect Binding. The server fails to enforce size limits during DEFLATE decompression, leading to an OutOfMemoryError (OOM) and subsequent process termination. This vulnerability allows an attacker to disrupt the availability of the service.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2575"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://access.redhat.com/errata/RHSA-2026:3947"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://access.redhat.com/errata/RHSA-2026:3948"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://access.redhat.com/security/cve/CVE-2026-2575"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440149"
37+
}
38+
],
39+
"database_specific": {
40+
"cwe_ids": [
41+
"CWE-409"
42+
],
43+
"severity": "MODERATE",
44+
"github_reviewed": false,
45+
"github_reviewed_at": null,
46+
"nvd_published_at": "2026-03-18T04:17:16Z"
47+
}
48+
}

0 commit comments

Comments
 (0)