Skip to content

cveboard RSS feed

Packagist

Friday, October 9
- GitHub CVE-2026-107845
  Contao: Cross-site scripting in the comments bundle
  - contao contao
  - Critical
  - CVSS 9.3
  - EPSS 0.27%
  - Fixed version listed
  20:53 UTC
Friday, September 25
- GitHub CVE-2026-92161
  FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider
  - FriendsOfFlarum oauth
  - Critical
  - CVSS 9.8
  - EPSS 0.27%
  - Fixed version listed
  15:55 UTC