GHSA-4Q39-2JHR-7QX8

creationtimestamp| type| source ---|---|--- 2026-09-02 23:38:43+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mul46lxbqp2y 2026-09-03 10:32:33+00:00| seen| https://gist.github.com/alon710/b49a4882cbb663c91159acdfe34ae468...

CVE-2026-84888

creationtimestamp| type| source ---|---|--- 2026-09-02 23:25:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/57rzlvezgj6h4...

CVE-2026-26247

creationtimestamp| type| source ---|---|--- 2026-09-02 23:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mul35abwqo2l...

CVE-2026-12556

creationtimestamp| type| source ---|---|--- 2026-09-02 21:28:09+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mukuv3x3nm2j 2026-09-03 10:54:31+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3mumbwz6dok26 2026-09-03 14:01:09+00:00| seen|...

CVE-2026-53671

creationtimestamp| type| source ---|---|--- 2026-09-02 20:07:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mukqfoyrwn2p 2026-09-02 20:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muksr3u7jm2v...

CVE-2026-84379

creationtimestamp| type| source ---|---|--- 2026-09-02 19:34:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/el37sn7tv53rt...

GO-2026-6327 SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read in github.com/seaweedfs/seaweedfs

SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read in github.com/seaweedfs/seaweedfs...

GO-2026-6323 klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits in github.com/klever-io/klever-go

klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits in github.com/klever-io/klever-go. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...

CVE-2026-79755

creationtimestamp| type| source ---|---|--- 2026-09-02 18:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mukjbo7hk32h 2026-09-02 18:54:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5duznc7mbj25r...

CVE-2026-82404

creationtimestamp| type| source ---|---|--- 2026-09-02 18:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mukjbhhcji2a 2026-09-02 19:00:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d72zrvwkyefas 2026-09-03 20:50:05+00:00| seen|...

CVE-2026-51744

creationtimestamp| type| source ---|---|--- 2026-09-02 17:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukip6i4ug2w...

GHSA-F65P-4M7J-42XC

creationtimestamp| type| source ---|---|--- 2026-09-02 17:33:14+00:00| seen| https://gist.github.com/alon710/4dc17918da62d2577fc435c04c7ff596 2026-09-03 19:52:00+00:00| seen| https://gist.github.com/konard/414f6d2acf125677f96485ac80cd6a3e 2026-09-03 20:01:16+00:00| seen|...

CVE-2026-19475

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

CVE-2026-77009

creationtimestamp| type| source ---|---|--- 2026-09-02 16:07:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mukcybx7hl2o 2026-09-02 18:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukkwpstlq2o...

CVE-2024-4254

creationtimestamp| type| source ---|---|--- 2026-09-02 16:00:04+00:00| seen| Telegram/s3zjyT-FT6tCC8Ykb-K7GeZvSlBBM3ljM38r7xtE1exsPM 2026-09-03 00:00:41+00:00| published-proof-of-concept| Telegram/s3zjyT-FT6tCC8Ykb-K7GeZvSlBBM3ljM38r7xtE1exsPM...

CVE-2026-19475 SQL Data Source Plugin: OOM DoS via $__timeGroup macro

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

CVE-2026-19475

Grafana is vulnerable to a denial of service via a bypass of the fix for CVE-2026-33375 . An authenticated user with permission to query a SQL data source can inject the timeGroup macro through a WHERE clause , which Grafana's regex-based macro parsing does not reject. Evaluating the injected mac...

CVE-2026-78594

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78410

util-linux is affected by a flaw in how restricted bind mounts are handled. The source path taken from /etc/fstab is not pinned before the privileged mount(8) call, allowing a local unprivileged user who can replace the authorized source or a writable ancestor to redirect the SUID mount to bind a...

CVE-2026-78410

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...