Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4 - The extension exposes the site task `records.custom_action` without authentication, ACL, CSRF, task-trigger, content-binding, or cron-token enforcement. A Guest can supply the numeric ID of any published TF Content task and make the component dispatch its configured executor immediately.
A missing authorization vulnerability exists in the Joomla extension TF Content versions 2.9.0 through 2.9.4. The extension's public RecordController allows unauthenticated users to create and edit records without proper permission checks. Attackers can use a valid token from Joomla's public login form to modify any TF Content record, including sensitive fields such as published status, access level, and creator ID.
An unauthenticated SQL injection vulnerability exists in OrdaSoft Joomla CCK versions up to and including 8.3.15. The flaw arises because the order column for records is user-controlled and not properly validated, allowing attackers to inject malicious SQL commands. This vulnerability has a critical severity rating with a CVSS score of 9.3.
A reflected cross-site scripting (XSS) vulnerability exists in the Dynamic Content Filter addon of the SP Page Builder Pro extension for Joomla. The issue occurs because slider minimum and maximum values are taken from a request parameter, HTML-escaped in an attribute but then echoed without escaping as text content, allowing an unauthenticated attacker to inject arbitrary HTML or JavaScript. The vulnerability affects versions 3.0.0 through 5.6.1p2 of the extension.
Plane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses returned by Gitea OAuth and by self-managed GitLab OAuth deployments where email confirmation is disabled, without verifying that the provider authenticated ownership of the address. An attacker can set an OAuth identity's unverified provider email to a victim's address, which Plane matches directly to the victim's existing local account. The attacker can then log in to the victim's Plane account without knowing the victim's password. GitHub, GitLab.com, and Google are not affected because those providers return verified email addresses. This issue is fixed in 1.4.0.
The domain microsoftusercontent.com, owned by Microsoft, is used as a content delivery network (CDN) for Microsoft 365 user content. There are concerns that compromised user accounts or sites could potentially deliver malicious content from this domain. This raises caution about whitelisting microsoftusercontent.com in antivirus or security solutions. No specific vulnerability or exploit details are provided, and no official vendor advisory or patch information is available.
This report summarizes multiple cybersecurity developments including a set of iCloud email spoofing vulnerabilities, phishing campaigns targeting AI policy experts, a Chrome adblocker extension spying on AI chat conversations, and a large batch of vulnerabilities patched by Kiteworks. The iCloud spoofing bugs allowed attackers to send emails from arbitrary icloud.com addresses that passed SPF, DKIM, and DMARC checks due to inconsistent mail header parsing. The phishing campaigns involved a China-aligned group using fake AI advisory committee invitations to steal credentials via an adversary-in-the-middle proxy. The Poper Blocker Chrome extension was found to collect users' browsing history and AI chat conversations stealthily. Kiteworks patched over 100 vulnerabilities, including critical bugs that could lead to account takeover and code execution. Additional highlights include AI-assisted discovery of Android app flaws and a Cloudflare Containers data leakage vulnerability that was patched. No active exploits in the wild were reported for these issues.
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large Roman numerals.
### Patches
This has been fixed in [pypdf==6.17.0](https://github.com/py-pdf/pypdf/releases/tag/6.17.0).
### Workarounds
If you cannot upgrade yet, consider applying the changes from PR [#4047](https://github.com/py-pdf/pypdf/pull/4047).
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires reading a PDF document with long indirect object headers, not terminated by whitespace.
### Patches
This has been fixed in [pypdf==6.18.0](https://github.com/py-pdf/pypdf/releases/tag/6.18.0).
### Workarounds
If you cannot upgrade yet, consider applying the changes from PR [#4055](https://github.com/py-pdf/pypdf/pull/4055).
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the `/ToUnicode` entry of a font with unusually large values, for example during text extraction.
### Patches
This has been fixed in [pypdf==6.18.1](https://github.com/py-pdf/pypdf/releases/tag/6.18.1).
### Workarounds
If you cannot upgrade yet, consider applying the changes from PR [#4071](https://github.com/py-pdf/pypdf/pull/4071).
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the `/Widths` entry of a TrueType or Type1 fonts with unusually large values, for example during text extraction.
### Patches
This has been fixed in [pypdf==6.18.1](https://github.com/py-pdf/pypdf/releases/tag/6.18.1).
### Workarounds
If you cannot upgrade yet, consider applying the changes from PR [#4072](https://github.com/py-pdf/pypdf/pull/4072).
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires a partially malformed `/FlateDecode` stream, where the byte-by-byte decompression is used.
### Patches
This has been fixed in [pypdf==6.18.1](https://github.com/py-pdf/pypdf/releases/tag/6.18.1).
### Workarounds
If you cannot upgrade yet, consider applying the changes from PR [#4073](https://github.com/py-pdf/pypdf/pull/4073).
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires updating form field values with flattening enabled, which triggers appearance stream generation.
### Patches
This has been fixed in [pypdf==6.19.0](https://github.com/py-pdf/pypdf/releases/tag/6.19.0).
### Workarounds
If you cannot upgrade yet, consider applying the changes from PR [#4087](https://github.com/py-pdf/pypdf/pull/4087).
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing the embedded files through the dictionary-based API.
### Patches
This has been fixed in [pypdf==6.19.0](https://github.com/py-pdf/pypdf/releases/tag/6.19.0).
### Workarounds
If you cannot upgrade yet, consider applying the changes from PR [#4081](https://github.com/py-pdf/pypdf/pull/4081).
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large alphabetical labels.
### Patches
This has been fixed in [pypdf==6.19.0](https://github.com/py-pdf/pypdf/releases/tag/6.19.0).
### Workarounds
If you cannot upgrade yet, consider applying the changes from PR [#4096](https://github.com/py-pdf/pypdf/pull/4096).
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 4.18.56. See the following advisory for the container images for
this release:
https://access.redhat.com/errata/RHSA-2026:70617
Security Fix(es):
* encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive
recursion in Unmarshal (CVE-2026-33818)
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege
escalation via incorrect Punycode label processing (CVE-2026-39821)
* mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME
header (CVE-2026-42504)
* html/template: golang: Go html/template: Cross-Site Scripting via
pathological input (CVE-2026-56858)
* encoding/xml: golang: Go: Denial of Service via XML decoding recursion
depth issue (CVE-2026-56859)
* net/url: golang: golang net/url: Denial of Service from quadratic
complexity in path resolution (CVE-2026-56860)
* crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite
KeyUpdate messages (CVE-2026-56862)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.18 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.
Gatekeeper v3.20.1
Gatekeeper is a validating webhook with auditing capabilities that can enforce custom resource
definition-based policies that are run with the Open Policy Agent (OPA). Gatekeeper is supported
through a Red Hat Advanced Cluster Management for Kubernetes subscription.
There are new parameters for the operator configuration, starting with version 3.20. View the following parameter descriptions:
- `mutatingWebhookConfig`: Use the `mutatingWebhookConfig` parameter with the `webhook` parameter for overrides and configurations specific to the mutating webhook. The mutation-specific fields in `webhook` are deprecated.
- `timeoutSeconds`: Use the `timeoutSeconds` parameter to customize webhook timeouts.
- `rules`: Use the `rules` parameter to customize the requests that are handled by the webhook. Unlike other fields, the `rules` parameter values are specified separately for validating and mutating webhooks. Setting the `rules` parameter overrides anything that you set in the `operations` parameter.
- `podAnnotations`: Specify the `podAnnotations` in `spec.audit` or `spec.webhook` to set deployment-specific annotations.
Additional release notes:
- Open Policy Agent Gatekeeper v3.20.0: https://github.com/open-policy-agent/gatekeeper/releases/tag/v3.20.0
- Open Policy Agent Gatekeeper v3.20.1: https://github.com/open-policy-agent/gatekeeper/releases/tag/v3.20.1
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 4.12.99. See the following advisory for the container images for
this release:
https://access.redhat.com/errata/RHSA-2026:70647
Security Fix(es):
None
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.12 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container
Platform 4.12.99. See the following advisory for the RPM packages for this
release:
https://access.redhat.com/errata/RHSA-2026:70645
Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes
Security Fix(es):
None
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.12 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.12.99. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHSA-2026:70645
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes