CVE-2026-47680

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-47680 Source controller: Improper path handling allows traversal

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-47680

CVE-2026-47680 is a path traversal vulnerability in FluxCD source-controller (versions 0.0.17 through 1.8.4), a Kubernetes operator for artifact acquisition from Git, OCI, Helm, and S3 sources. Two attack surfaces exist: (1) an actor who can influence the contents of a Bucket-referenced bucket ca...

CVE-2026-47680 Source controller: Improper path handling allows traversal

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-47680 Source controller: Improper path handling allows traversal

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

EUVD-2026-74295

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-86083

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the legacy expression engine generated source text by calling the mutable global JSON.stringify while printing synthetic string literals and interpolating timezone data. An expression could replace...

Aegis aegis-v0.14.1-alpha

AEGIS is a desktop app for monitoring local AI agents and reviewing their files and selected actions. Inspect processes, sensitive-file observations, TCP endpoints and attribution evidence in Observatory. Monitoring requires no agent plugin; policy-controlled execution and MCP action tools requir...

CVE-2026-75746

creationtimestamp| type| source ---|---|--- 2026-09-08 22:11:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv224cxmdq2r 2026-09-09 12:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv3kncwxmp2g 2026-10-11 00:30:26+00:00| seen|...

CVE-2026-49883

creationtimestamp| type| source ---|---|--- 2026-09-08 22:11:27+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv2243bjm22w 2026-09-09 22:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4l2fy3k422 2026-09-15 02:37:07+00:00| seen|...

Command Injection

Overview composer/composer is a Dependency Manager for PHP. Composer helps you declare, manage and install dependencies of PHP projects. It ensures you have the right stack everywhere. Affected versions of this package are vulnerable to Command Injection via the handling of Perforce source...

Composer arbitrary command execution via a malicious package's Perforce source URL

Summary If the p4 Perforce CLI client is installed, a malicious dependency package from a package repository allowing arbitrary perforce source URLs packagist.org is safe could execute arbitrary commands when running composer install or composer update. Composer passed a package's Perforce source...

GHSA-RVX4-FFVW-M9Q3 Composer arbitrary command execution via a malicious package's Perforce source URL

Summary If the p4 Perforce CLI client is installed, a malicious dependency package from a package repository allowing arbitrary perforce source URLs packagist.org is safe could execute arbitrary commands when running composer install or composer update. Composer passed a package's Perforce source...

CVE-2026-86464

creationtimestamp| type| source ---|---|--- 2026-09-08 21:22:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/epzguzddyvbho 2026-09-08 22:12:02+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv2253fi6u2y 2026-09-09 12:30:03+00:00| seen|...

CVE-2026-69910

creationtimestamp| type| source ---|---|--- 2026-09-08 20:12:11+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztgsew5d2p 2026-09-08 20:20:06+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:06:34+00:00| seen|...

CVE-2026-78560

CVE-2026-78560 affects the Okta Access Gateway , specifically its optional pass-through authentication source , which accepts user identity from a client-supplied HTTP header without cryptographic validation. When this source is enabled without an upstream reverse proxy or firewall that sanitizes...

CVE-2026-86674

creationtimestamp| type| source ---|---|--- 2026-09-08 19:40:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cnumft23wgo3e...

GHSA-97QJ-X29F-37W7

creationtimestamp| type| source ---|---|--- 2026-09-08 18:21:13+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3muznaeuf6c26...

CVE-2025-67066

creationtimestamp| type| source ---|---|--- 2026-09-08 17:08:24+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3muzj664ank2c...

CVE-2026-78132

creationtimestamp| type| source ---|---|--- 2026-09-08 13:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz5arz6362i 2026-09-11 12:45:16+00:00| seen| https://www.acn.gov.it/portale/w/sanate-vulnerabilita-in-strongswan 2026-09-16 00:01:43+00:00| seen|...