ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading
Newly collected advisory
CVE-2026-116157
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Weekly briefing
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
2295 source records · 1652 groupsSecurityImageMagick before 7.1.2-33 Memory Leak in magick compare
ImageMagick before 7.1.2-33 Memory Leak in magick compare
Newly collected advisory
CVE-2026-116158
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder
ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder
Newly collected advisory
CVE-2026-116141
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityInfinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity
Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity
Newly collected advisory
CVE-2026-116072
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityInstaWP Connect < 0.1.4.2 - Authenticated Plugin Settings Update via instawp_update_settings
InstaWP Connect < 0.1.4.2 - Authenticated Plugin Settings Update via instawp_update_settings
Newly collected advisory
CVE-2026-114743
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityKodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload
KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload
Newly collected advisory
CVE-2026-116057
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityKodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery
KodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery
Newly collected advisory
CVE-2026-116056
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityLeon before commit 50df142 Path Traversal via /download model Command
Leon before commit 50df142 Path Traversal via /download model Command
Newly collected advisory
CVE-2026-116073
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityLinkStackOrg LinkStack cross-site request forgery
LinkStackOrg LinkStack cross-site request forgery
Newly collected advisory
CVE-2026-116052
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityLoading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records
Loading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records
Newly collected advisory
CVE-2026-114214
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @blueskydataplatform/shared-ui (npm)
Malicious code in @blueskydataplatform/shared-ui (npm)
Affected-version evidence changed
MAL-2026-18212
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @capsense/ccx-welcome-page (npm)
Malicious code in @capsense/ccx-welcome-page (npm)
Newly collected advisory
MAL-2026-18294
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @capsense/core-ui (npm)
Malicious code in @capsense/core-ui (npm)
Newly collected advisory
MAL-2026-18295
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @cecm-web-sdk/core (npm)
Malicious code in @cecm-web-sdk/core (npm)
Affected-version evidence changed
MAL-2026-18213
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @drone-js-ext/core (npm)
Malicious code in @drone-js-ext/core (npm)
Newly collected advisory
MAL-2026-18276
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @drone-js-ext/vip-badge (npm)
Malicious code in @drone-js-ext/vip-badge (npm)
Newly collected advisory
MAL-2026-18277
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @eforms/forms-api (npm)2 source records
Affected-version evidence changed · 2 entries
- Malicious code in @eforms/forms-api (npm)
Affected-version evidence changed
MAL-2026-18252
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
- Malicious code in @eforms/forms-api (npm)
Newly collected advisory
MAL-2026-18252
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @factiii/runner (npm)2 source records
Affected-version evidence changed · 2 entries
- Malicious code in @factiii/runner (npm)
Affected-version evidence changed
MAL-2026-18204
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
- Malicious code in @factiii/runner (npm)
Affected-version evidence changed
MAL-2026-18204
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @factoryz/apollo (npm)
Malicious code in @factoryz/apollo (npm)
Newly collected advisory
MAL-2026-18278
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @fmr-ap153177/apex-kit-icons (npm)
Malicious code in @fmr-ap153177/apex-kit-icons (npm)
Newly collected advisory
MAL-2026-18279
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @futurae-public/adaptive-js (npm)
Malicious code in @futurae-public/adaptive-js (npm)
Newly collected advisory
MAL-2026-18280
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @generic-means/ing-feat-scanner-libs (npm)
Malicious code in @generic-means/ing-feat-scanner-libs (npm)
Newly collected advisory
MAL-2026-18281
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @greenlake/common-context (npm)
Malicious code in @greenlake/common-context (npm)
Newly collected advisory
MAL-2026-18282
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @greenlake/session (npm)
Malicious code in @greenlake/session (npm)
Newly collected advisory
MAL-2026-18283
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.