DEBIAN-CVE-2026-54603

OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connect OIDC. From 0.4.0 to 2.0.21, a protocol-relative redirect Location returned to OAuth2::Clientrequest overrides the request authority, so the bearer Authorization header is sent to an...

CVE-2026-16581

creationtimestamp| type| source ---|---|--- 2026-07-28 16:51:38+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-06 2026-07-28 17:04:20+00:00| seen| https://bsky.app/profile/cerberusit.bsky.social/post/3mrpve6p6qi23 2026-07-28 17:04:22+00:00| seen|...

CVE-2026-16347

creationtimestamp| type| source ---|---|--- 2026-07-28 16:51:33+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-05 2026-07-28 23:29:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqkvfi4dm2s 2026-08-01 01:02:36+00:00| seen|...

CVE-2026-43910

creationtimestamp| type| source ---|---|--- 2026-07-28 16:35:12+00:00| published-proof-of-concept| https://github.com/appium/java-client/security/advisories/GHSA-28f5-38xr-jh2w...

CVE-2026-47427

creationtimestamp| type| source ---|---|--- 2026-07-28 16:35:07+00:00| published-proof-of-concept| https://github.com/github/github-mcp-server/security/advisories/GHSA-w4q6-qw23-4rg7 2026-07-28 23:12:18+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrqjw7fxsn2l...

CVE-2026-61609

creationtimestamp| type| source ---|---|--- 2026-07-28 16:35:05+00:00| published-proof-of-concept| https://github.com/pterodactyl/panel/security/advisories/GHSA-xvc3-826v-xf47 2026-07-28 17:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrpv6ijm6f2o...

CVE-2026-54593

creationtimestamp| type| source ---|---|--- 2026-07-28 16:35:02+00:00| published-proof-of-concept| https://github.com/pterodactyl/panel/security/advisories/GHSA-8r6w-3qq5-4p4r...

GHSA-HC4M-Q9JH-XW4J

creationtimestamp| type| source ---|---|--- 2026-07-28 16:31:30+00:00| seen| https://gist.github.com/alon710/92ad6f547c2ba0c3ac7a937f90c439cc...

firefox: thunderbird: Site isolation issue in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...

firefox: thunderbird: Site isolation issue in the Graphics: WebRender component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics: WebRender component...

firefox: thunderbird: Mitigation bypass in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the PDF Viewer component...

firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript: WebAssembly component...

firefox: thunderbird: Information disclosure in the Framework component in DevTools

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Framework component in DevTools...

firefox: thunderbird: Privilege escalation in the DOM: Content Processes component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Content Processes component...

firefox: thunderbird: Privilege escalation in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component...

firefox: thunderbird: Privilege escalation in WebExtensions

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in WebExtensions...

firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...

firefox: thunderbird: Incorrect boundary conditions in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics component...

firefox: thunderbird: Mitigation bypass in the DOM: Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Networking component...

firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of...