122091 matches found
postcss: PostCSS: Information disclosure via crafted sourceMappingURL
A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration the 'from' parameter is not set. This can cause the application to read and expose unintended source-map files, potentially revealing...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: prometheus3.13: prometheus3.13-3.13.2-0.2.hum1 aarch64, x8664 prometheus3.13-3.13.2-0.2.hum1.src src Security Fixes: prometheus3.13: CVE-2026-69153...
postcss: PostCSS: Information disclosure via path traversal in source map auto-loading
A flaw was found in PostCSS. An attacker can exploit a path traversal vulnerability by providing specially crafted sourceMappingURL values in untrusted CSS files. This allows the attacker to disclose sensitive sourcesContent from arbitrary .map files accessible on the system, leading to informati...
CVE-2026-69100
creationtimestamp| type| source ---|---|--- 2026-08-04 16:35:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7jkswcrezfnaq...
GHSA-6VH2-WG4H-4VWJ
creationtimestamp| type| source ---|---|--- 2026-08-04 16:31:33+00:00| seen| https://gist.github.com/alon710/6149a4f7f7f2ae19b65c163d6f6db13a...
CVE-2026-15920
creationtimestamp| type| source ---|---|--- 2026-08-04 16:29:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/h5c2dvuor5uzy 2026-08-05 14:43:12+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3msdr7aekni2v 2026-08-05 14:54:36+00:00| seen|...
CVE-2026-15337
creationtimestamp| type| source ---|---|--- 2026-08-04 16:29:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/h5c2dvuor5uzy...
CVE-2026-15830
creationtimestamp| type| source ---|---|--- 2026-08-04 16:29:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/h5c2dvuor5uzy 2026-09-16 20:00:13+00:00| seen| https://bsky.app/profile/djangonews.bsky.social/post/3mvnwirlrtq2s 2026-09-23 23:00:10+00:00| seen|...
GHSA-WP74-F5HH-5F3R
creationtimestamp| type| source ---|---|--- 2026-08-04 15:32:39+00:00| seen| https://gist.github.com/alon710/2dd72db9fde8130e6ba6e6299e77ffd0...
CVE-2026-69252
creationtimestamp| type| source ---|---|--- 2026-08-04 15:32:39+00:00| seen| https://gist.github.com/alon710/2dd72db9fde8130e6ba6e6299e77ffd0 2026-08-04 16:35:24+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wp74-f5hh-5f3r 2026-08-10...
MAL-2026-11727 Malicious code in @or-sdk/source (npm)
npm/@or-sdk/source is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by t...
Malicious code in @or-sdk/source (npm)
npm/@or-sdk/source is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by t...
CVE-2026-69251
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrary TypeORM DataSource options through the additionalConfig input in...
GHSA-33VJ-92QQ-66HC
creationtimestamp| type| source ---|---|--- 2026-08-04 15:15:12+00:00| seen| https://gist.github.com/cwayne18/2df919c96745d903491c33321eb89359 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b 2026-08-05 21:55:34+00:00| seen|...
GHSA-XHF5-7WJV-PQXP
creationtimestamp| type| source ---|---|--- 2026-08-04 15:15:12+00:00| seen| https://gist.github.com/cwayne18/2df919c96745d903491c33321eb89359 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b 2026-08-05 21:55:34+00:00| seen|...
GHSA-CVXM-645Q-P574
creationtimestamp| type| source ---|---|--- 2026-08-04 15:15:12+00:00| seen| https://gist.github.com/cwayne18/2df919c96745d903491c33321eb89359 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b 2026-08-05 21:55:34+00:00| seen|...
CVE-2026-14337
creationtimestamp| type| source ---|---|--- 2026-08-04 15:01:43+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3msbbqwmtp22t...
CVE-2026-10709
creationtimestamp| type| source ---|---|--- 2026-08-04 14:42:00+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msbao5ww2k2v...
