sqlparse 0.6.1 fixes two flaws as maintainers end the project
A GitHub discussion says a flood of security reports influenced the decision to end sqlparse after this release.
Stories per day · 30 days
Relatedphp2php2shell2apache-camel1apache-pulsar1copeland1credential-disclosure1cyber-resilience-act1danfoss1deserialization1digital-privacy1embedded-devices1france1gms1hazelcast1healthcare1health-data1java1kev1
8 stories, newest first · one card per story
Stories tagged #end-of-life
SonicWall GMS Flaws Unpatched After End of Life
SonicWall GMS has unpatched flaws after reaching end of life, exposing devices to risks.
CISA confirms active exploitation of PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619
Official fixes are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, while many appliance and EOL runtimes have no direct patch.
Unofficial patch targets PHP2Shell OOM in PHP 5.4–5.6
The community backport covers unsupported PHP 5.4, 5.5, and 5.6 for CVE-2026-109618 and CVE-2026-109619.
Apache Pulsar Manager missing auth leaks admin credentials (CVE-2026-105944)
The Apache Pulsar PMC says the end-of-life manager lacks authentication and authorization and can expose Pulsar admin credentials.
EU law will not force fixes for attacked end-of-life fridge controllers
Paris prosecutors put victims near 700 after French supermarket controllers were driven into a 50°C defrost.
1
Study finds end-of-life care weakens patients’ digital privacy control
Interviews with 21 patients, 11 caregivers, and 8 physicians describe five structural privacy failures.
Apache Camel fixes 38 CVEs in 4.18.5, 4.22.1 and 4.23.0
The 4.14.x line is end of life and does not receive these fixes.