262021 matches found
CVE-2026-14617
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected is the function GatewayStreamConsumer.filterandaccumulate of the file gateway/streamconsumer.py of the component Streaming Reasoning Tag Filter. The manipulation leads to improper handling of case...
CVE-2026-58289
creationtimestamp| type| source ---|---|--- 2026-07-03 22:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mprkz3ncbz2e 2026-07-04 02:04:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprxujsddx25 2026-07-04 18:49:58+00:00| seen|...
CVE-2026-14617
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected is the function GatewayStreamConsumer.filterandaccumulate of the file gateway/streamconsumer.py of the component Streaming Reasoning Tag Filter. The manipulation leads to improper handling of case...
CVE-2026-8286
creationtimestamp| type| source ---|---|--- 2026-07-03 21:34:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprirlclji2k...
CVE-2026-11856
creationtimestamp| type| source ---|---|--- 2026-07-03 21:33:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpriqx7mx42d 2026-07-07 04:03:34+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mpzpwrjcgc22...
CVE-2026-58419 Notification API leaks private issue metadata after access revocation
Notification API leaks private issue metadata after access revocation...
CVE-2026-58419
Notification API leaks private issue metadata after access revocation...
CVE-2026-58419
CVE-2026-58419 affects the Go-Gitea project where the Notification API can leak private issue metadata after access revocation. The Snyk notes describe Information Exposure in multiple internal components of the Gitea web feed/routers, convert, and git modules, with affected code paths in the Not...
CVE-2026-58524
Microsoft Edge (Chromium-based) has a cross-site scripting (XSS) vulnerability (CVE-2026-58524) due to improper input neutralization during web page generation, enabling spoofing over a network. The CVSS v3.1 base score is 5.4 (Medium) with network attack vector and user interaction required. Aff...
CVE-2026-58297 Microsoft Edge for Android Information Disclosure Vulnerability
...
CVE-2026-58294 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-58284 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-57974 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-57988
Relative path traversal in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-43000 vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-keystone-2025.2, openstack-keystone-2025.1, openstack-keystone-2026.1, openstack-keystone-2026.1-fips, openstack-keystone-2025.2-fips...
GHSA-G27C-Q7CP-MHX6 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-28699 Gitea Basic Auth bypasses OAuth2 access token scopes
Gitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to be bypassed through HTTP Basic authentication...
CVE-2026-27660 Gitea draft releases use insufficient permission checks
Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission...
CVE-2026-27657
CVE-2026-27657 affects Gitea prior to 1.25.5. The issue arises in the email settings workflow where a user can alter another user’s primary email address, described as an Authorization Bypass Through User-Controlled Key. Affected evidence in connected sources indicates the root cause is insuffici...