Change Ledger
Official changes we have detected — recalls, end of support, exploited vulnerabilities, breaches. Every signal links to its source and to a public, tamper-evident evidence ledger.
CPSC, Fisher-Price Announce Recall to Repair Power Wheels Ride-On Battery-Powered Vehicles
The recalled Power Wheels cars and trucks have been sold under nearly 100 model names. The Power Wheels logo and the model name are on each vehicle. All models with two batteries are recalled, and ce…
IQecg® Digital ECG
IQecg® Digital ECG — Performance — Cardiovascular
Dantrium Intravenous (Dantrolene sodium for injection): Presence of particulate matter
Dantrium Intravenous (Dantrolene sodium for injection) — Contamination — Drugs
Al Fakher Pro Refill Device Kit recalled due to lack of child-resistant packaging
Al Fakher Pro Refill Device Kit, multiple colours — Labelling and packaging — Vaping and tobacco products
One Degree Organic Foods brand Sprouted Whole Wheat Flour recalled to due misleading gluten free claim
Sprouted Whole Wheat Flour — Gluten — Grain products
CVE-2026-110936: Siemens Software Center Uncontrolled Search Path Element Vulnerability
Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the applicatio…
CVE-2026-96655: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/un…
CVE-2026-96654: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to call other plugins' functions and supply their own parameters.…
CVE-2026-96652: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter and force th…
CVE-2026-96656: Plex Media Server External Control of File Name or Path Vulnerability
Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chaine…
CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system r…
Stuffed Animal Recalled by Great American Toy Co.
This recall involves only stuffed crabs that have antennas with wires and that have the letters "BSW" on the Great American Toy Co. label attached to the toy. The stuffed crabs are either blue and gr…
Bi-fold Doors Repair by Schweiss Distributing
These very large doors, used for barns, aircraft hangars and commercial buildings, roll up from the bottom to open and fold the door in half as it raises. These doors can be up to 150 feet wide. Writ…
CVE-2026-112943: launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor did no…
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor did not escape % on Windows when passing an argument to cmd. When an environment vari…
CVE-2026-112951: ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing con…
ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing content after a valid rgb() or hsl() prefix because its TinyColor validation does…
CVE-2026-112952: ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, 'POST /api/v1/@apostrophecms/doc/slu…
ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, 'POST /api/v1/@apostrophecms/doc/slugTaken' with body { "slug": "target-slug" } returns a boolean indicating whethe…
CVE-2026-112956: ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, duplicate…
ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, duplicate-import continuation accepts client-controlled replacement choices without bind…
CVE-2026-110095: fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 throu…
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, the normalize() and serialize() functio…
CVE-2026-112942: launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor-middle…
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor-middleware processes an attacker-controlled Windows file argument where the file argu…
CVE-2026-110180: fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from…
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from 3.1.3 through 3.1.8, and from 4.0.1 through 4.2.2, for HTTP-family schemes the…
CVE-2026-110306: fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 throu…
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, fast-uri percent-decodes the scheme com…
CVE-2026-112954: ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses pub…
ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses publicApiProjection can expose excluded searchable or sortable field information t…
CVE-2026-112953: ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictab…
ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictable export archive filenames allow an unauthenticated requester to download anot…
CVE-2026-112955: ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, an authen…
ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, an authenticated importer can submit archives whose decompressed bytes, entry count, and…
CVE-2026-112944: launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can…
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working director…
CVE-2026-110725: fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 throu…
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, when serialize(), normalize(), or resol…
Innovagoods Fotmassageapparat — Safety Gate alert SR/02992/26
Dangerous product alert (environment) for Fotmassageapparat (Massager). Check batch numbers and measures on the official alert.
Triumph TF450-E — Safety Gate alert SR/03007/26
Dangerous product alert (injuries) for TF450-E (Motorcycle). Check batch numbers and measures on the official alert.
Desk lamp — Safety Gate alert SR/03016/26
Dangerous product alert (chemical, environment) for Desk lamp. Check batch numbers and measures on the official alert.
Childrens fun camera — Safety Gate alert SR/03005/26
Dangerous product alert (chemical, environment) for Childrens fun camera (Toy camera). Check batch numbers and measures on the official alert.
Cat wireless headphone — Safety Gate alert SR/03010/26
Dangerous product alert (chemical, environment) for Cat wireless headphone (Wireless headphone). Check batch numbers and measures on the official alert.
Befast Optimus — Safety Gate alert SR/02931/26
Dangerous product alert (injuries) for Optimus (Motorcycle helmet). Check batch numbers and measures on the official alert.
Crest 3D White Whitestrips - Professional Effects - Dental whitening treatment — Safety Gate alert SR/02980/26
Dangerous product alert (chemical) for Whitestrips - Professional Effects - Dental whitening treatment (Teeth whitening strips). Check batch numbers and measures on the official alert.
KONDELA Luminous Christmas tree TEMPO KONDELA — Safety Gate alert SR/00287/25
Dangerous product alert (electric shock) for Luminous Christmas tree TEMPO KONDELA (Christmas tree ). Check batch numbers and measures on the official alert.
Abstyle Sincolor — Safety Gate alert SR/02989/26
Dangerous product alert (chemical) for Sincolor (Hair-colouring cream). Check batch numbers and measures on the official alert.
Magnetic toy — Safety Gate alert SR/02984/26
Dangerous product alert (choking, injuries) for Magnetic toy. Check batch numbers and measures on the official alert.
DIESEL Only the brave — Safety Gate alert SR/02982/26
Dangerous product alert (chemical) for Only the brave (Eau de toilette). Check batch numbers and measures on the official alert.
Yongkang MinRui Electric Tool Plant 21V Cordless Drill Driver Kit — Safety Gate alert SR/03015/26
Dangerous product alert (electric shock) for Yongkang MinRui Electric Tool Plant 21V Cordless Drill Driver Kit (Electric drill). Check batch numbers and measures on the official alert.
Volkswagen (VW) ID.Polo — Safety Gate alert SR/03001/26
Dangerous product alert (injuries) for ID.Polo (Passenger car). Check batch numbers and measures on the official alert.
Hugo (Hugo Boss) Energise — Safety Gate alert SR/03012/26
Dangerous product alert (chemical) for Energise (Eau de toilette). Check batch numbers and measures on the official alert.
Peugeot 208 V2 - ICE, MHEV — Safety Gate alert SR/03006/26
Dangerous product alert (fire) for 208 V2 - ICE, MHEV (Passenger car). Check batch numbers and measures on the official alert.
Elektrisk nagelfil — Safety Gate alert SR/02994/26
Dangerous product alert (environment) for Elektrisk nagelfil (Nail file). Check batch numbers and measures on the official alert.
Cape de pluie L´AFFREUX JOJO — Safety Gate alert SR/02972/26
Dangerous product alert (injuries, strangulation) for Cape de pluie L´AFFREUX JOJO (Children's raincoat). Check batch numbers and measures on the official alert.
Qoltec Car battery trickle charger — Safety Gate alert SR/02962/26
Dangerous product alert (electric shock) for Car battery trickle charger. Check batch numbers and measures on the official alert.
Cape de pluie light gold — Safety Gate alert SR/03004/26
Dangerous product alert (strangulation) for Cape de pluie light gold (Children's raincoat). Check batch numbers and measures on the official alert.
INF INF luftfuktare med färgglad LED lampa — Safety Gate alert SR/02988/26
Dangerous product alert (environment) for INF luftfuktare med färgglad LED lampa (Humidifier). Check batch numbers and measures on the official alert.
Annam DEEPAM OIL — Safety Gate alert SR/02985/26
Dangerous product alert (health risk other) for DEEPAM OIL (Lamp oil). Check batch numbers and measures on the official alert.
Massager cervical Vertebra — Safety Gate alert SR/02996/26
Dangerous product alert (environment) for Massager cervical Vertebra (Neck massager). Check batch numbers and measures on the official alert.
Hamsa käsi ja ametüst kristalliga kaelaehe / amulett / talisman — Safety Gate alert SR/02975/26
Dangerous product alert (chemical) for Hamsa käsi ja ametüst kristalliga kaelaehe / amulett / talisman (Necklace). Check batch numbers and measures on the official alert.
Leg and arm moylding massage instrument — Safety Gate alert SR/02998/26
Dangerous product alert (environment) for Leg and arm moylding massage instrument (Calf massager). Check batch numbers and measures on the official alert.
Only see what affects you
Add what you own or use. Reality Radar matches new official changes to your items and explains why.