@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.27), @142vip/vuepress (0.0.1-alpha.19) +211 more potentially affected by CVE-2026-71438 via mermaid (>=11.0.0, <=11.16.0)

mermaid NPM version =11.0.0, =0.0.1-alpha.23, =0.0.0, =2.1.0, =2.1.0, =0.1.0, =2.1.0, =2.1.0, =2.1.0, =2.0.2, =0.0.3, =0.15.0, =0.35.0, =0.2.0, =1.0.1 and more Source cves: CVE-2026-71438 Source advisory: SNYK:JS-MERMAID-18592324...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.27), @142vip/vuepress (0.0.1-alpha.19) +211 more potentially affected by CVE-2026-71438 via mermaid (>=11.0.0, <=11.16.0)

mermaid NPM version =11.0.0, =0.0.1-alpha.23, =0.0.0, =2.1.0, =2.1.0, =0.1.0, =2.1.0, =2.1.0, =2.1.0, =2.0.2, =0.0.3, =0.15.0, =0.35.0, =0.2.0, =1.0.1 and more Source cves: CVE-2026-71438 Source advisory: OSV:GHSA-C4C3-PG64-4M4V...

Mermaid Architecture diagrams are vulnerable to prototype pollution

Rendering an untrusted architecture-beta diagram lets the diagram author write an arbitrary property with the value horizontal or vertical onto Object.prototype. A group id of proto is accepted as a valid parent. Impact Any code in the same realm that reads a property of that name from an arbitra...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.27), @142vip/vuepress (0.0.1-alpha.19) +120 more potentially affected by CVE-2026-71437 via mermaid (>=11.5.0, <=11.16.0)

mermaid NPM version =11.5.0, =0.0.1-alpha.23, =0.0.0, =2.1.0, =2.1.0, =0.1.0, =2.1.0, =2.1.0, =2.1.0, =2.0.2, =0.0.3, =0.16.0, =0.35.0, =0.2.0, =1.0.1 - @cognitivesand/md2pdf 0.1.3 and more Source cves: CVE-2026-71437 Source advisory: SNYK:JS-MERMAID-18592329...

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @airmix/mcp-excalidraw-server (1.0.6) +200 more potentially affected by CVE-2026-71436 via mermaid (>=10.6.1, <=10.9.5)

mermaid NPM version =10.6.1, =0.18.0-beta.0, =0.17.1-alkemio-5, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =0.18.1, =1.1.4, =0.0.1, =0.0.1, =0.0.1, =7.1.0, =0.114.3, =0.140.0 and more Source cves: CVE-2026-71436 Source advisory: SNYK:JS-MERMAID-18592327...

GHSA-8RXV-JG7P-WVG3

creationtimestamp| type| source ---|---|--- 2026-08-06 19:32:23+00:00| seen| https://gist.github.com/alon710/73aecb4bf7a9c9303fe6451f784d95ea...

Important: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syste...

CVE-2026-71326

creationtimestamp| type| source ---|---|--- 2026-08-06 18:35:20+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-6765-c87h-8mrf...

CVE-2026-71327

creationtimestamp| type| source ---|---|--- 2026-08-06 18:35:18+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-fgjj-px3w-67xx...

CVE-2026-71325

creationtimestamp| type| source ---|---|--- 2026-08-06 18:35:13+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-62fc-8686-hfmq...

CVE-2026-65600

creationtimestamp| type| source ---|---|--- 2026-08-06 18:31:30+00:00| seen| https://gist.github.com/alon710/1c8a7f596af5fdd35dfa04b0effb7a0b 2026-08-06 18:35:06+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cxjq-mrr5-89rv...

GHSA-CXJQ-MRR5-89RV

creationtimestamp| type| source ---|---|--- 2026-08-06 18:31:30+00:00| seen| https://gist.github.com/alon710/1c8a7f596af5fdd35dfa04b0effb7a0b...

Important: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

GHSA-X677-9FXG-V5C5

creationtimestamp| type| source ---|---|--- 2026-08-06 17:31:27+00:00| seen| https://gist.github.com/alon710/b0c30693be99e5683b1b7fa34bf1c9d1...

Important: Red Hat Security Advisory: Backport fixes for CVE-2026-64835 and CVE-2026-58049

Backport fixes for CVE-2026-64835 and CVE-2026-58049 CVE-2026-64835 FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files CVE-2026-58049 FFmpeg: Memory corruption via crafted RASC video stream...

GHSA-CXJQ-MRR5-89RV Traefik: Authentication Bypass via Path Traversal in ReplacePathRegex Middleware

Summary There is a critical authentication-bypass vulnerability in Traefik's ReplacePathRegex middleware. When it is configured with a regular expression that captures user-controlled path segments without a mandatory separator for example regex: "^/api.", replacement: "/$1", a crafted request ca...

GHSA-3CCP-42PG-HGV6

creationtimestamp| type| source ---|---|--- 2026-08-06 16:31:29+00:00| seen| https://gist.github.com/alon710/44f5ca1944b401eb63cfb2fdd265ca45...

CVE-2026-71324

creationtimestamp| type| source ---|---|--- 2026-08-06 16:31:29+00:00| seen| https://gist.github.com/alon710/44f5ca1944b401eb63cfb2fdd265ca45 2026-08-06 16:35:02+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-3ccp-42pg-hgv6...

CVE-2026-9203

creationtimestamp| type| source ---|---|--- 2026-08-06 16:15:59+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...

CVE-2021-20334

creationtimestamp| type| source ---|---|--- 2026-08-06 16:15:35+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-218-01 2026-08-10 04:02:55+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3msp7qvoyw624...