vulnerability in thorsten/phpmyfaq (CVE-2026-49205). Confidential information can be exposed externally. Exploitable via `POST /api/v4.0/category`. Mitigation: upgrade to `4.1.4` or later.
vulnerability in luajit (MGASA-2026-0225). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.0-0.beta3.10.1.mga9` or later.
vulnerability in ruby-rack (MGASA-2026-0226). Risk of unauthorized operations or information disclosure. Exploitable via ``Forwarded``. Mitigation: upgrade to `2.2.23-1.mga9` or later.
vulnerability in opensc (MGASA-2026-0224). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.25.0-1.2.mga9` or later.