Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization CVE-2026-116675, GHSA-mf2p-h6hf-fcwm | High | 0.3% | 2 days ago | NuGet TinyMCE Packagist tinymce/tinymce npm tinymce |
Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter CVE-2026-33944, GHSA-v5fq-cf5m-vwv7 | High | Not scored | 2 days ago | Packagist dolibarr/dolibarr |