EUVD-2026-44678

FastGPT is a knowledge-based AI application platform. Prior to 4.15.0-beta5, FastGPT's shared SSRF guard validates only the initial request URL before handing the request to axios, and axios follows redirects by default. An authenticated workflow user can configure an HTTP request node to call an...

CVE-2025-62675

creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n...

CVE-2025-66412 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GHSA-5WVM-RXCF-6CG8 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

CVE-2022-41720 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

CVE-2026-50557 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GHSA-F3M7-GQXR-G87X vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GHSA-V4HV-RGFQ-GP49 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

CVE-2026-15131 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15111 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-53566

creationtimestamp| type| source ---|---|--- 2026-07-15 14:15:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqovu3ew4h2c 2026-07-15 16:15:13+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-702 2026-07-17 13:02:33+00:00| seen|...

kernel: rtmutex: Use waiter::task instead of current in remove_waiter()

A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...

USN-8549-1 python-idna vulnerability

It was discovered that idna did not properly reject oversized inputs before performing expensive processing. An attacker could possibly use this issue to cause idna to consume significant resources, leading to a denial of service...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), city.smartb.i2:keycloak-plugin-client (>=0.11.0, <=0.13.0) +412 more potentially affected by CVE-2026-16104 via org.keycloak:keycloak-server-spi-private (>=2.4.0.cr1, <=26.7.1)

org.keycloak:keycloak-server-spi-private MAVEN version =2.4.0.cr1, =0.1.0, =0.11.0, =0.10.4, =0.0.1, =1.5.1, =1.5.1, =1.6.2, =1.6.2, =1.5.2, =1.5.2, =1.7.2, =1.7.2, =1.0.22, =1.0.22, =1.4.3, =1.6.0 and more Source cves: CVE-2026-16104 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18751621...

CVE-2026-56400

creationtimestamp| type| source ---|---|--- 2026-07-15 12:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqoqg5mume2p 2026-07-15 15:43:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2rmdoce2e 2026-07-17 04:37:06+00:00| seen|...

CVE-2026-53633

A flaw was found in Vitest Browser Mode, a component of the Vitest testing framework. The cdp API exposed raw Chrome DevTools Protocol CDP methods without proper security restrictions. This vulnerability allows a remote attacker, with access to browser API metadata, to leverage CDP functions like...

CVE-2026-58555

Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58550

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-58550

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

libsolv security update

An update is available for libsolv. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libsolv packages provide a library for resolving package dependencies usi...