Our news and updates

In Content Egg – Affiliate Product Importer & Price Comparison component for WordPress versions 11.3.0 and earlier a high severity vulnerability CVE-2026-15979 was detected. This vulnerability allows attackers to delete arbitrary files on the server. To address this issue, users should upgrade Content Egg – Affiliate Product Importer & Price Comparison to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15979.

In Django versions 5.2 before 5.2.17 and 6.0 before 6.0.8 a medium severity vulnerability CVE-2026-15337 was detected. This vulnerability allows a potential denial-of-service attack. To address this issue, users should upgrade Django to version 5.2.17 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15337.

In Django versions 5.2 before 5.2.17 and 6.0 before 6.0.8 a medium severity vulnerability CVE-2026-15920 was detected. This vulnerability allows attackers to craft malicious URLs in the admin interface. To address this issue, users should upgrade Django to version 5.2.17 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15920.

In pdm component for Python versions prior to 2.27.0 a high severity vulnerability CVE-2026-47764 was detected. This vulnerability allows an attacker to perform path traversal. To address this issue, users should upgrade pdm to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-47764.

In OpenWebUI versions 0.8.8 up to 0.11.0 a medium severity vulnerability CVE-2026-70490 was detected. This vulnerability allows an attacker to bypass user verification on terminal routes. To address this issue, users should upgrade OpenWebUI to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-70490.

In the Triton MLflow plugin component for MLflow in earlier versions a medium severity vulnerability CVE-2026-47487 was detected. This vulnerability allows an attacker to read, write, or modify files outside the intended model repository. To address this issue, users should upgrade MLflow to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-47487.

In Apache NiFi versions 1.10.0 through 2.10.0 a medium severity vulnerability CVE-2026-62354 was detected. This vulnerability allows users with read access to override configuration settings. To address this issue, users should upgrade Apache NiFi to version 2.11.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62354.

In Apache NiFi versions 2.0.0 through 2.10.0 a critical severity vulnerability CVE-2026-68980 was detected. This vulnerability allows unauthorized asset deletion via the REST API. To address this issue, users should upgrade Apache NiFi to version 2.11.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-68980.

In Apache NiFi versions 1.5.0 through 2.10.0 a high severity vulnerability CVE-2026-68981 was detected. This vulnerability allows attackers to consume excessive amounts of memory through crafted requests. To address this issue, users should upgrade Apache NiFi to version 2.11.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-68981.