CVE-2026-14535 Fickling MLAllowlist analysis pass rendered inoperative by shared mutable state in AnalysisContext.shorten_code()

In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shortencodenode on every import node it inspects, regardless of whether the import is flagged as unsafe. This call registers the shortened code representation in...

CVE-2026-14534

Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules posixsubprocess, site, and atexit in the UNSAFEIMPORTS denylist fickle.py. Because these modules are absent from the denylist, fickling's checksafety function returns LIKELYSAFE with zero...

CVE-2026-53361

In the Linux kernel, the following vulnerability has been resolved: afunix: Set gcinprogress to true in unixgc. Igor Ushakov reported that unixgc could run with gcinprogress being false if the work is scheduled while running: Thread 1 Thread 2 Thread 3 -------- -------- -------- unixschedulegc...

CVE-2026-53362

In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In ip6appenddata, when the paged-allocation branch is taken MSGMORE / NETIFFSG / large fraglen, alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen;...

BELL-CVE-2026-58374 CVE-2026-58374 does not affect BellSoft software

Bulletin has no description...

CVE-2026-13443

creationtimestamp| type| source ---|---|--- 2026-07-04 05:15:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpscjxubzp2j...

CVE-2026-12481

creationtimestamp| type| source ---|---|--- 2026-07-04 02:14:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpryhsaiob2o 2026-07-05 21:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpwhtlwptm2v 2026-07-09 06:37:06+00:00| seen|...

CVE-2026-54424

creationtimestamp| type| source ---|---|--- 2026-07-04 02:12:57+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mprye52cxm24 2026-07-04 04:23:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mps7obvjwu2e 2026-07-04 05:15:04+00:00| seen|...

CVE-2026-57974

creationtimestamp| type| source ---|---|--- 2026-07-04 01:49:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprwzoh6te2g 2026-07-05 18:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpw5rctw2327 2026-07-06 07:48:58+00:00| seen|...

CVE-2026-58282

creationtimestamp| type| source ---|---|--- 2026-07-04 01:24:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprvnmoq2o2i 2026-07-05 12:01:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpvjovbj2y2b 2026-07-05 14:00:45+00:00| seen|...

CVE-2025-71372 Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle reduce methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded, bypassing Picklescan's safety checks and enabling...

CVE-2026-14617

A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected is the function GatewayStreamConsumer.filterandaccumulate of the file gateway/streamconsumer.py of the component Streaming Reasoning Tag Filter. The manipulation leads to improper handling of case...

CVE-2026-58289

creationtimestamp| type| source ---|---|--- 2026-07-03 22:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mprkz3ncbz2e 2026-07-04 02:04:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprxujsddx25 2026-07-04 18:49:58+00:00| seen|...

CVE-2026-14617

A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected is the function GatewayStreamConsumer.filterandaccumulate of the file gateway/streamconsumer.py of the component Streaming Reasoning Tag Filter. The manipulation leads to improper handling of case...

CVE-2026-8286

creationtimestamp| type| source ---|---|--- 2026-07-03 21:34:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprirlclji2k...

CVE-2026-11856

creationtimestamp| type| source ---|---|--- 2026-07-03 21:33:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpriqx7mx42d 2026-07-07 04:03:34+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mpzpwrjcgc22...

CVE-2026-58419 Notification API leaks private issue metadata after access revocation

Notification API leaks private issue metadata after access revocation...

CVE-2026-58419

Notification API leaks private issue metadata after access revocation...

CVE-2026-58419

CVE-2026-58419 affects the Go-Gitea project where the Notification API can leak private issue metadata after access revocation. The Snyk notes describe Information Exposure in multiple internal components of the Gitea web feed/routers, convert, and git modules, with affected code paths in the Not...

CVE-2026-58524

Microsoft Edge (Chromium-based) has a cross-site scripting (XSS) vulnerability (CVE-2026-58524) due to improper input neutralization during web page generation, enabling spoofing over a network. The CVSS v3.1 base score is 5.4 (Medium) with network attack vector and user interaction required. Aff...