Known Vulnerabilities for Merge by Araxis
Listed below are 10 of the newest known vulnerabilities associated with "Merge" by "Araxis".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-112405 json | Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference a null image8 plane. Val... | Not Provided | 2026-10-19 | 2026-10-20 |
| CVE-2026-111762 json | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequestBody ... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-111606 json | Huly Platform through 0.7.432 contains a missing authorization vulnerability that allows any authenticated user to merge arbi... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-110645 json | Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by ... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-110024 json | @fastify/jwt is a JWT utility plugin for Fastify. In versions prior to 10.2.5, the top-level sign and verify methods replace ... | Not Provided | 2026-10-18 | 2026-10-20 |
| CVE-2026-108550 json | SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController th... | Not Provided | 2026-10-10 | 2026-10-14 |
| CVE-2026-105667 json | In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending appl... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-103482 json | The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptin_fie... | Not Provided | 2026-10-10 | 2026-10-11 |
| CVE-2026-101335 json | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Arbitrary Sho... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-101008 json | A vulnerability was found in aaPanel BaoTa up to 11.8.0. Impacted is the function merge_split_file of the file /www/server/pa... | Not Provided | 2026-09-28 | 2026-09-28 |