Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 6.3 CVE-2026-57235

Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`_CVE-2026-57235

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::NodeSet#[] (and its alias #slice...

sparklemotion nokogiri < 1.19.4 CVE
LOW 2.6 CVE-2026-57234

Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247_CVE-2026-57234

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, the NONET parse option, which Nokogiri turns on...

sparklemotion nokogiri < 1.19.4 CVE
MEDIUM 6.5 CVE-2026-49319

Alps Electric Co., Ltd. R53R0 Remote Keyless Entry System (RKES) Replay Attack_CVE-2026-49319

Remote Keyless Entry System (RKES), using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is vulnerable to a rol...

Alps Electric Co., Ltd. Remote Keyless Entry System (RKES) R53R0 R53R0 CVE
HIGH 7.8 CVE-2026-46735

CVE-2026-46735_CVE-2026-46735

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutralization of Special Elements used in an OS Command...

Dell Display and Peripheral Manager CVE
LOW 2 CVE-2026-13314

Stored XSS in pretix-digital_CVE-2026-13314

Malicious HTML content could be injected into the content rendered by the pretix-digital plugin.

pretix pretix-digital CVE
MEDIUM 5.3 CVE-2026-13225

Stored XSS in ticket confirmation page_CVE-2026-13225

Malicious HTML content could be injected into the email address of an order, which pretix showed without sanitization on the confirmation page fo...

pretix pretix CVE
MEDIUM 6.3 CVE-2026-13223

Insufficient validation of payment status in pretix-computop_CVE-2026-13223

Our payment integration with Computop-based payment methods did not properly validate payment status responses. An attacker could use a successfu...

pretix pretix-computop CVE
MEDIUM 6.3 CVE-2026-13222

Insufficient validation of payment status in pretix-oppwa_CVE-2026-13222

Our payment integration with Oppwa-based payment methods did not properly validate payment status responses. An attacker could use a successful p...

pretix pretix-oppwa CVE
MEDIUM 6.9 CVE-2026-9718

CVE-2026-9718_CVE-2026-9718

CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to trigger a denial-of-service condition, impacting sys...

Schneider Electric PowerLogic™ P7 Version V02.003.001.000 and prior CVE
HIGH 8.6 CVE-2026-9717

CVE-2026-9717_CVE-2026-9717

CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized executi...

Schneider Electric PowerLogic™ P7 Version V02.003.001.000 and prior CVE