Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 5.3 CVE-2026-57587

SQL Injection in Nessus via Reverse DNS Lookup_CVE-2026-57587

A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject mal...

tenable Nessus CVE
MEDIUM 6.3 CVE-2026-57536

Insufficient validation of payment status in pretix-mollie_CVE-2026-57536

Our payment integration with Mollie did not properly validate payment status responses. An attacker could use a successful payment status respons...

pretix pretix-mollie CVE
LOW 2.1 CVE-2026-57535

CVE-2026-57535_CVE-2026-57535

Content injected to PDF rendering contexts could, in many places, include HTML content including tags. If the src attribute of these images point...

pretix pretix CVE
LOW 2.1 CVE-2026-57534

Stored XSS in pretix-pages_CVE-2026-57534

Malicious HTML content could be injected into the content of a page in the pretix-pages plugin.

pretix pretix-pages CVE
LOW 2.1 CVE-2026-57533

CVE-2026-57533_CVE-2026-57533

Malicious HTML content could be injected into the page pretix shows when redirection to an untrusted page occurs. Since this page has a Content-S...

pretix pretix CVE
HIGH 8.8 CVE-2026-57532

CVE-2026-57532_CVE-2026-57532

Malicious HTML content contained in the layout specification of a PDF ticket or badge layout was executed when the PDF editor is opened in the br...

pretix pretix CVE
LOW 1.7 CVE-2026-57437

Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime_CVE-2026-57437

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::XPathContext did not keep its so...

sparklemotion nokogiri < 1.19.4 CVE
LOW 1.7 CVE-2026-57436

Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type_CVE-2026-57436

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Document#root= validated only th...

sparklemotion nokogiri < 1.19.4 CVE
LOW 1.7 CVE-2026-57435

Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`_CVE-2026-57435

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri’s CRuby native extension could leave a...

sparklemotion nokogiri < 1.19.4 CVE
LOW 1.7 CVE-2026-57434

Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes_CVE-2026-57434

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain me...

sparklemotion nokogiri < 1.19.4 CVE