Advisories · Weakness
Information disclosure.
Sensitive data exposed to people who shouldn’t see it. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 6.9 Medium
NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links
- netbox
- Cross-site scripting (XSS)
- Information disclosure
- CVSS 8.8 High
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 8.8 High
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 9.6 CriticalCritical · CVSS 9+
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 8.8 High
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 4.6 Medium
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 5.1 Medium
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 3.1 Low
Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 4.3 Medium
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 5.3 Medium
Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 4.3 Medium
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 6.5 Medium
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 4.3 Medium
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 4.3 Medium
Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 4.3 Medium
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 5.3 Medium
Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 3.1 Low
Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 4.3 Medium
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 4.0 Medium
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 8.8 High
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 4.3 Medium
Resource exposure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 4.3 Medium
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 6.5 Medium
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 5.3 Medium
Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
- CVSS 6.9 Medium
WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability
- Automattic WordPress
- Information disclosure
- CVSS 7.7 High
Payload vulnerable to API key disclosure through ordinary document reads
- Information disclosure
- Broken access control
>=3.0.0, <3.90.0 || >=4.0.0-canary.0, <4.0.0-canary.34 · fixed in 3.90.0, 4.0.0-canary.34
GHSA-238x-w2j9-gwwr · CVE-2026-105849 - CVSS 7.1 High
Payload: Token refresh and password reset responses may expose restricted user fields
- Information disclosure
>=3.0.0, <3.90.0 || >=4.0.0-canary.0, <4.0.0-canary.34 · fixed in 3.90.0, 4.0.0-canary.34
GHSA-xgv3-crq2-6f69 · CVE-2026-105853 - CVSS 7.1 High
Payload: Polymorphic join queries could disclose hidden fields
- Information disclosure
- Broken access control
>=3.0.0, <3.90.0 || >=4.0.0-canary.0, <4.0.0-canary.34 · fixed in 3.90.0, 4.0.0-canary.34
GHSA-fpww-c55p-cjv6 · CVE-2026-105847 - CVSS 6.9 Medium
Payload: Sort queries could expose protected field information
- Information disclosure
- Broken access control
<3.88.0 || >=4.0.0-canary.0, <4.0.0-canary.27 · fixed in 3.88.0, 4.0.0-canary.27
GHSA-9g87-32v6-3c2r · CVE-2026-105805 - CVSS 6.5 Medium
Sensitive information in log files in Dell Container Storage Modules
- Dell Container Storage Modules
- Information disclosure
- CVSS 7.7 High
Sensitive information in log files in Dell Container Storage Modules
- Dell Container Storage Modules
- Information disclosure
- CVSS 6.9 Medium
WordPress Motors plugin <= 1.4.124 - Sensitive Data Exposure vulnerability
- StylemixThemes Motors
- Information disclosure
- CVSS 7.5 High
WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.17 - Sensitive Data Exposure vulnerability
- Royal Plugins SiteVault – Backup, Restore, Migration & Cloning
- Information disclosure
- CVSS 7.5 High
WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerability
- Adrian Tobey Groundhogg
- Information disclosure
- CVSS 7.5 High
WordPress Xserver Migrator plugin <= 1.6.6 - Sensitive Data Exposure vulnerability
- Xserver Migrator
- Information disclosure
- CVSS 7.5 High
WordPress Snapshotify – All-in-One Backup & Restore & Migrate plugin <= 1.3.2 - Sensitive Data Exposure vulnerability
- DaftPlug Snapshotify – All-in-One Backup & Restore & Migrate
- Information disclosure
- CVSS 7.5 High
WordPress Norvis Backup plugin <= 1.1.0 - Sensitive Data Exposure vulnerability
- norvisgabriel Norvis Backup
- Information disclosure
- CVSS 7.5 High
WordPress Museder RestoreOne plugin <= 2.7.276 - Sensitive Data Exposure vulnerability
- Adrian Lin Museder RestoreOne
- Information disclosure
- CVSS 7.5 High
WordPress SafeSnap – Verified WordPress Backup & Restore plugin <= 2.1.2 - Sensitive Data Exposure vulnerability
- Pluginjoy SafeSnap – Verified WordPress Backup & Restore
- Information disclosure
- CVSS 5.3 Medium
WordPress Mailjet Email Marketing plugin <= 6.2.3 - Sensitive Data Exposure vulnerability
- Mailjet Email Marketing
- Information disclosure
- CVSS 7.2 High
WordPress Edwiser Bridge plugin <= 4.3.4 - Sensitive Data Exposure vulnerability
- WisdmLabs Edwiser Bridge
- Information disclosure
- CVSS 5.3 Medium
Slider Pro <= 1.0.0 - Unauthenticated Sensitive Data Disclosure via sliderpro_multiple_images
- Slider Pro
- Information disclosure
- CVSS 7.5 High
WordPress Sitemovr plugin <= 1.0.1 - Sensitive Data Exposure vulnerability
- Dawer Drew Sitemovr
- Information disclosure
- CVSS 6.9 Medium
uptrace user_handler.go Login information exposure
- uptrace
- Information disclosure
- CVSS 5.9 Medium
Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode
- Information disclosure
- Broken access control
>=2.82.0, <2.118.1 · fixed in 2.118.1
GHSA-q43m-vhcp-mhvm · CVE-2026-105750 - CVSS 3.1 Low
vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle
- Information disclosure
- CWE-524
<0.30.0 · fixed in 0.30.0
GHSA-935w-9g4m-p28p · CVE-2026-105752 - CVSS 4.9 Medium
An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints
- Information disclosure
- CVSS 6.5 Medium
vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features
- Denial of service
- Broken access control
<0.30.0 · fixed in 0.30.0
GHSA-ph72-cqr5-qpp7 · CVE-2026-105754 - CVSS 6.9 Medium
vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary
- Information disclosure
- Memory corruption
<3.12.2 · fixed in 3.12.2
GHSA-489w-w794-jq94 · CVE-2026-100723 - CVSS 6.5 Medium
Snowflake drivers writes sensitive information to logs
- Information disclosure
<=1.19.1 · no fixed version yet
GHSA-qqj6-54q6-cxv6 · CVE-2026-86597 - CVSS 5.8 Medium
Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute
- Information disclosure
<0.66.0 · fixed in 0.66.0
GHSA-qqmp-wf37-98f9 · CVE-2026-104872 - CVSS 7.5 High
Quart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.__await__
- Information disclosure
>=0.23.0, <0.23.1 · fixed in 0.23.1
GHSA-v853-p72q-4cfw - CVSS 6.9 Medium
vm2: util.getCallSites() bypasses GHSA-v27g-jcqj-v8rw host-frame redaction, leaks host call stack
- Information disclosure
- CWE-693
<3.11.8 · fixed in 3.11.8
GHSA-r273-hxvj-fxhp · CVE-2026-92933 - CVSS 6.9 Medium
vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting
- Information disclosure
>=3.11.0, <3.11.7 · fixed in 3.11.7
GHSA-x6m4-chr9-cg97 · CVE-2026-92936 - CVSS 10.0 CriticalCritical · CVSS 9+
vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool
- Information disclosure
- CWE-653
<3.11.7 · fixed in 3.11.7
GHSA-fcqc-726x-5wfc · CVE-2026-92947 - CVSS 2.2 Low
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.83.0 until 2.131.0, the KServeV2OcrModel class defined in docli...
- Information disclosure
- CWE-693
>=2.83.0, <2.131.0 · fixed in 2.131.0
GHSA-h42j-9hcc-3cwc · CVE-2026-105746 - CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Files accessible to external parties in Atlassian Bamboo Data Center and others
- Atlassian Bamboo Data Center
- Atlassian Bitbucket Data Center
- Information disclosure
- CVSS 7.0 High
Newell Brands DYMO ID parent directory open to path traversal through improper spheres of control
- Newell Brands DYMO ID
- Path traversal
- Information disclosure
- CVSS 4.3 Medium
Penpot: Share-link page-scope escape — comment RPCs leak comment content, author identity, and all page-ids for pages outside the share scope
- penpot
- Information disclosure
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Plane: Pre-auth workspace invitation hijack via email-squat and self-served invitation token leak in Plane
- plane
- Information disclosure
- Authentication bypass