CVE-2026-60559

creationtimestamp| type| source ---|---|--- 2026-07-23 17:19:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-30 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrvdu7ce6c2v...

CVE-2026-60553

creationtimestamp| type| source ---|---|--- 2026-07-23 17:19:42+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60445

creationtimestamp| type| source ---|---|--- 2026-07-23 17:16:53+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 17:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrftlp4zbx2r 2026-07-25 07:37:07+00:00| seen|...

CVE-2026-60422

creationtimestamp| type| source ---|---|--- 2026-07-23 17:16:06+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 14:42:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrflk7rlwq2u 2026-07-29 07:07:06+00:00| seen|...

CVE-2026-60343

creationtimestamp| type| source ---|---|--- 2026-07-23 16:52:18+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60222

creationtimestamp| type| source ---|---|--- 2026-07-23 16:48:36+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-08-11 01:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msrgfhz2z22o...

CVE-2026-47005

creationtimestamp| type| source ---|---|--- 2026-07-23 16:45:57+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-65900

creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:23+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-gvmj-g25r-r7wr...

CVE-2026-65901

creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:21+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-x4vx-rjvf-j5p4...

CVE-2026-65902

creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:19+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-76mc-f452-cxcm...

CVE-2026-65912

creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:16+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cjmm-f4jc-qw8r...

CVE-2026-65913

creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:14+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cj63-jhhr-wcxv...

CVE-2026-59931

creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:09+00:00| published-proof-of-concept| https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-6hq5-7373-42rg 2026-07-28 19:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrq3udnieo2f 2026-07-28...

CVE-2026-59932

creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:07+00:00| published-proof-of-concept| https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-2mrg-gjxq-2gvr 2026-07-28 18:43:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq2uso3v32e...

CVE-2026-45623

creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:02+00:00| published-proof-of-concept| https://github.com/postcss/postcss/security/advisories/GHSA-6g55-p6wh-862q 2026-08-03 18:28:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gp5oyt6frvyqh 2026-08-03 18:31:17+00:00|...

@12-apps/app-shell (>=1.0.0, <=5.7.0), @12-apps/auth (>=1.2.0, <=2.21.0) +278 more potentially affected by unknown CVE via @auth/core (>=0.1.0, <=0.41.2)

@auth/core NPM version =0.1.0, =1.0.0, =1.2.0, =1.3.0, =3.0.0, =4.11.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @anish-karthik/create-next-app 1.0.1 - @api-buddy/cli 3.0.5 - @api-buddy/plugin-auth-firebase 3.0.3 - @aponia.js/adapter-prisma 0.2.0 and more Source cves: unknown CVE Source advisory...

@chirpy-dev/analytics (0.0.1), @chirpy-dev/bootstrapper (0.1.0) +53 more potentially affected by CVE-2026-73418 via next-auth (>=4.1.2, <=4.24.13)

next-auth NPM version =4.1.2, =0.1.0, =1.9.0, =1.9.9, =0.1.0-0, =1.5.0, =0.0.2, =1.0.0, =1.0.0, =0.0.0-experimental-20231123101256, =5.1.0 and more Source cves: CVE-2026-73418 Source advisory: OSV:GHSA-XMF8-CVQR-RFGJ...

GHSA-XMF8-CVQR-RFGJ Auth.js: getToken() throws an uncaught exception on malformed Bearer authorization headers

Summary The exported getToken helper next-auth/jwt and @auth/core/jwt can throw an uncaught exception when it reads a malformed Authorization: Bearer … header. When no session cookie is present, getToken URL-decodes the bearer value before validating it, and malformed percent-encoding causes the...

@12-apps/app-shell (>=1.0.0, <=5.7.0), @12-apps/auth (>=1.2.0, <=2.21.0) +278 more potentially affected by unknown CVE via @auth/core (>=0.1.0, <=0.41.2)

@auth/core NPM version =0.1.0, =1.0.0, =1.2.0, =1.3.0, =3.0.0, =4.11.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @anish-karthik/create-next-app 1.0.1 - @api-buddy/cli 3.0.5 - @api-buddy/plugin-auth-firebase 3.0.3 - @aponia.js/adapter-prisma 0.2.0 and more Source cves: unknown CVE Source advisory...

@12-apps/app-shell (>=1.0.0, <=5.7.0), @12-apps/auth (>=1.2.0, <=2.21.0) +278 more potentially affected by CVE-2026-73420 via @auth/core (>=0.1.0, <=0.41.2)

@auth/core NPM version =0.1.0, =1.0.0, =1.2.0, =1.3.0, =3.0.0, =4.11.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @anish-karthik/create-next-app 1.0.1 - @api-buddy/cli 3.0.5 - @api-buddy/plugin-auth-firebase 3.0.3 - @aponia.js/adapter-prisma 0.2.0 and more Source cves: CVE-2026-73420 Source...