CVE-2026-69262

creationtimestamp| type| source ---|---|--- 2026-08-04 17:31:02+00:00| seen| https://gist.github.com/alon710/3c340657379dfd929a73082180747c70 2026-08-06 20:45:34+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-flowise...

CVE-2026-11368

creationtimestamp| type| source ---|---|--- 2026-08-04 17:04:50+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msbinl5ppt2g...

CVE-2026-24083

creationtimestamp| type| source ---|---|--- 2026-08-04 17:01:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbihshx5l2l...

CVE-2026-25292

creationtimestamp| type| source ---|---|--- 2026-08-04 17:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbihlrsjm2t...

postcss: PostCSS: Information disclosure via crafted sourceMappingURL

A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration the 'from' parameter is not set. This can cause the application to read and expose unintended source-map files, potentially revealing...

CVE-2026-10032

creationtimestamp| type| source ---|---|--- 2026-08-04 16:48:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/j7o7c57m4b5cj 2026-10-02 23:30:28+00:00| seen| https://gist.github.com/alon710/bbef448ddedc6cabee70ea28e567bc12...

postcss: PostCSS: Information disclosure via crafted sourceMappingURL

A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration the 'from' parameter is not set. This can cause the application to read and expose unintended source-map files, potentially revealing...

postcss: PostCSS: Information disclosure via path traversal in source map auto-loading

A flaw was found in PostCSS. An attacker can exploit a path traversal vulnerability by providing specially crafted sourceMappingURL values in untrusted CSS files. This allows the attacker to disclose sensitive sourcesContent from arbitrary .map files accessible on the system, leading to informati...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: prometheus3.13: prometheus3.13-3.13.2-0.2.hum1 aarch64, x8664 prometheus3.13-3.13.2-0.2.hum1.src src Security Fixes: prometheus3.13: CVE-2026-69153...

CVE-2026-69100

creationtimestamp| type| source ---|---|--- 2026-08-04 16:35:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7jkswcrezfnaq...

GHSA-6VH2-WG4H-4VWJ

creationtimestamp| type| source ---|---|--- 2026-08-04 16:31:33+00:00| seen| https://gist.github.com/alon710/6149a4f7f7f2ae19b65c163d6f6db13a...

CVE-2026-15920

creationtimestamp| type| source ---|---|--- 2026-08-04 16:29:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/h5c2dvuor5uzy 2026-08-05 14:43:12+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3msdr7aekni2v 2026-08-05 14:54:36+00:00| seen|...

CVE-2026-15337

creationtimestamp| type| source ---|---|--- 2026-08-04 16:29:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/h5c2dvuor5uzy...

CVE-2026-15830

creationtimestamp| type| source ---|---|--- 2026-08-04 16:29:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/h5c2dvuor5uzy 2026-09-16 20:00:13+00:00| seen| https://bsky.app/profile/djangonews.bsky.social/post/3mvnwirlrtq2s 2026-09-23 23:00:10+00:00| seen|...

GHSA-WP74-F5HH-5F3R

creationtimestamp| type| source ---|---|--- 2026-08-04 15:32:39+00:00| seen| https://gist.github.com/alon710/2dd72db9fde8130e6ba6e6299e77ffd0...

CVE-2026-69252

creationtimestamp| type| source ---|---|--- 2026-08-04 15:32:39+00:00| seen| https://gist.github.com/alon710/2dd72db9fde8130e6ba6e6299e77ffd0 2026-08-04 16:35:24+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wp74-f5hh-5f3r 2026-08-10...

MAL-2026-11727 Malicious code in @or-sdk/source (npm)

npm/@or-sdk/source is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by t...

Malicious code in @or-sdk/source (npm)

npm/@or-sdk/source is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by t...

CVE-2026-69251

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrary TypeORM DataSource options through the additionalConfig input in...

GHSA-33VJ-92QQ-66HC

creationtimestamp| type| source ---|---|--- 2026-08-04 15:15:12+00:00| seen| https://gist.github.com/cwayne18/2df919c96745d903491c33321eb89359 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b 2026-08-05 21:55:34+00:00| seen|...