https://patchbriefing.com/nl/php-packages/cve-2026-107848-contao-csrf-backend-acties PatchBriefing nl 2026-10-10T20:05:28+02:00 CVE-2026-107848 — Contao: CSRF bij backend-acties https://patchbriefing.com/nl/nodejs-npm/cve-2026-107719-fast-jwt-verlopen-jwt-cache PatchBriefing nl 2026-10-10T20:04:55+02:00 fast-jwt: Verifier-cache accepteert verlopen JWT's (CVE-2026-107719) https://patchbriefing.com/nl/php-packages/contao-cve-2026-107851-tableaccessvoter PatchBriefing nl 2026-10-10T20:04:32+02:00 Contao: onjuiste toegangscontrole in TableAccessVoter (CVE-2026-107851) https://patchbriefing.com/nl/php-packages/contao-preview-links-cve-2026-107850 PatchBriefing nl 2026-10-10T20:04:06+02:00 Contao: Onjuiste toegangscontrole in preview-links (CVE-2026-107850) https://patchbriefing.com/nl/nodejs-npm/msgpack5-decoderen-negatieve-int64-verandert-invoerbuffer-cve-2026-107296 PatchBriefing nl 2026-10-10T20:03:40+02:00 msgpack5: Decoderen van negatieve int64 verandert de invoerbuffer (CVE-2026-107296) https://patchbriefing.com/nl/php-packages/enshrined-svg-sanitize-cve-2026-107380 PatchBriefing nl 2026-10-10T20:03:16+02:00 CVE-2026-107380: Stored XSS in enshrined/svg-sanitize via DTD-entiteit en HTML5 named character reference-collision https://patchbriefing.com/nl/nodejs-npm/fast-jwt-clocktolerance-infinity-omzeiling-cve-2026-107721 PatchBriefing nl 2026-10-10T20:02:44+02:00 fast-jwt: clockTolerance = Infinity omzeilt exp/nbf en blijft in verifier-cache (CVE-2026-107721) https://patchbriefing.com/nl/nodejs-npm/music-metadata-ebml-vint-geheugenuitputting PatchBriefing nl 2026-10-10T20:02:14+02:00 music-metadata: EBML VINT-lengte vertrouwd, waardoor geheugenuitputting mogelijk is (CVE-2026-107389) https://patchbriefing.com/nl/nodejs-npm/music-metadata-apev2-ongecontroleerde-geheugenallocatie-cve-2026-107387 PatchBriefing nl 2026-10-10T20:01:46+02:00 music-metadata: Ongecontroleerde geheugenallocatie in APEv2-parser (CVE-2026-107387) https://patchbriefing.com/nl/nodejs-npm/cve-2026-108259-tinacms-cli-branch-code-injectie PatchBriefing nl 2026-10-09T20:56:52+02:00 CVE-2026-108259 — Code-injectie in @tinacms/cli via ongevangen Git-branchnaam https://patchbriefing.com/nl/nodejs-npm/cve-2026-108261-tinacms-admin-preview-origin-fragment-nl PatchBriefing nl 2026-10-09T20:56:48+02:00 CVE-2026-108261 — TinaCMS admin-preview laadt aanvallers‑origin uit URL-fragment https://patchbriefing.com/nl/nodejs-npm/cve-2026-108260-tinacms-tina-markdown-opgeslagen-xss PatchBriefing nl 2026-10-09T20:56:45+02:00 CVE-2026-108260: opgeslagen XSS in @tinacms/web-components (tina-markdown) https://patchbriefing.com/nl/php-packages/contao-zoekindex-lek-cve-2026-107842 PatchBriefing nl 2026-10-09T20:54:09+02:00 Contao zoekindex-lek — CVE-2026-107842 https://patchbriefing.com/nl/php-packages/cve-2026-107843-contao-registratie-herstuur-activatiemails PatchBriefing nl 2026-10-09T20:54:04+02:00 CVE-2026-107843 — Contao registratie-module stuurt activatiemails opnieuw https://patchbriefing.com/nl/php-packages/cve-2026-107844-contao-imagescontroller-pad-traversal PatchBriefing nl 2026-10-09T20:53:55+02:00 Contao pad‑traversal in ImagesController (CVE-2026-107844) https://patchbriefing.com/nl/php-packages/cve-2026-107845-contao-comments-bundle-xss PatchBriefing nl 2026-10-09T20:53:50+02:00 CVE-2026-107845 — XSS in contao/comments-bundle kan backend blootstellen bij weergave van reacties https://patchbriefing.com/nl/browsers/google-chrome-154-0-8037-151-chromeos-16805-33-0-nl PatchBriefing nl 2026-10-09T16:46:54+02:00 Google Chrome 154.0.8037.151 (ChromeOS Stable, OS 16805.33.0) https://patchbriefing.com/nl/wordpress/cve-2026-101324-fluent-forms-reflected-xss-nl PatchBriefing nl 2026-10-09T00:00:00+02:00 CVE-2026-101324 — Fluent Forms reflected XSS via {get.*} in Custom HTML-velden https://patchbriefing.com/nl/wordpress/wp-rocket-cve-2026-97076-cve-2026-97075 PatchBriefing nl 2026-10-09T00:00:00+02:00 WP Rocket: CVE-2026-97076 en CVE-2026-97075