CVE-2026-45011
High Severity Description Apostrophe has stored XSS via javascript: URL in Image Widget Link Read more at https://www.tenable.com/cve/CVE-2026-45011
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
CVE-2026-45012
High Severity Description Apostrophe has authenticated SSRF in rich-text widget import via @apostrophecms/area/validate-widget Read more at https://www.tenable.com/cve/CVE-2026-45012
CVE-2026-45013
High Severity Description Apostrophe has a Weak Password Recovery Mechanism for Forgotten Password and Improper Input Validation Read
RHSA-2026:17659: Important: openexr security update
An update for openexr is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
RHSA-2026:17660: Important: openexr security update
An update for openexr is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat
DSA-6271-1 gsasl – security update
https://security-tracker.debian.org/tracker/DSA-6271-1
DSA-6269-1 postgresql-15 – security update
https://security-tracker.debian.org/tracker/DSA-6269-1
DSA-6270-1 postgresql-17 – security update
https://security-tracker.debian.org/tracker/DSA-6270-1
DSA-6267-1 thunderbird – security update
https://security-tracker.debian.org/tracker/DSA-6267-1
DSA-6268-1 ffmpeg – security update
https://security-tracker.debian.org/tracker/DSA-6268-1