CVE-2026-58035 Stored XSS through a system message in the codex version of Special:Block

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Special.Block/SpecialBlock.Vue...

CVE-2026-58035 Stored XSS through a system message in the codex version of Special:Block

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Special.Block/SpecialBlock.Vue...

Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs

Apple on Monday released security updates for iOS, macOS, and the Safari web browser to address over three dozen flaws, including four vulnerabilities in WebKit that were discovered using artificial intelligence AI tools like Anthropic Claude and OpenAI Codex Security. The WebKit vulnerabilities...

Malicious code in monty-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d234eb20e94a8d34b23f4aed0a562eb1c038ce5bd603856546c970152a70ac5 On npm install, the package's postinstall hook package.json declares "postinstall": "node bin/cli.js" automatically runs a data-collection CLI withou...

OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws

OpenAI on Monday said it's releasing an improved version of its GPT‑5.5‑Cyber model to trusted defenders as part of the Daybreak initiative the artificial intelligence AI company announced last month. Calling GPT‑5.5‑Cyber its "strongest model yet for finding and helping patch software...

Maestro 0.17.1

Maestro is a cross-platform desktop app for orchestrating your fleet of AI agents and projects. It's a high-velocity solution for hackers who are juggling multiple projects in parallel. Designed for power users who live on the keyboard and rarely touch the mouse. Collaborate with AI to create...

vulntraceai-plugin

VulntraceAI — plugin & CLI Evidence-gated vulnerability res...

atomicshop (>=3.5.4, <=3.14.22), codex (>=1.8.0, <=1.8.11) +14 more potentially affected by CVE-2026-55206 via py7zr (>=1.0.0rc3, <=1.1.0)

py7zr PYPI version =1.0.0rc3, =3.5.4, =1.8.0, =2.0.3, =1.0.0, =0.3.0, =1.0.1, =0.1.4, =2026.6.0b1, =0.0.0.dev0, =0.9.429, =2.4.0, =0.1.4, =0.3.1 - rebotics-sdk 0.31.1 and more Source cves: CVE-2026-55206 Source advisory: OSV:GHSA-H4GH-22QQ-72R7...

atomicshop (>=3.5.4, <=3.14.22), codex (>=1.8.0, <=1.8.11) +14 more potentially affected by CVE-2026-55206 via py7zr (>=1.0.0rc3, <=1.1.0)

py7zr PYPI version =1.0.0rc3, =3.5.4, =1.8.0, =2.0.3, =1.0.0, =0.3.0, =1.0.1, =0.1.4, =2026.6.0b1, =0.0.0.dev0, =0.9.429, =2.4.0, =0.1.4, =0.3.1 - rebotics-sdk 0.31.1 and more Source cves: CVE-2026-55206 Source advisory: GHSA-H4GH-22QQ-72R7...

atomicshop (>=3.5.4, <=3.14.22), codex (>=1.8.0, <=1.8.11) +14 more potentially affected by CVE-2026-55195 via py7zr (>=1.0.0rc3, <=1.1.0)

py7zr PYPI version =1.0.0rc3, =3.5.4, =1.8.0, =2.0.3, =1.0.0, =0.3.0, =1.0.1, =0.1.4, =2026.6.0b1, =0.0.0.dev0, =0.9.429, =2.4.0, =0.1.4, =0.3.1 - rebotics-sdk 0.31.1 and more Source cves: CVE-2026-55195 Source advisory: OSV:GHSA-GJRG-MPP7-G774...

atomicshop (>=3.5.4, <=3.14.22), codex (>=1.8.0, <=1.8.11) +14 more potentially affected by CVE-2026-55195 via py7zr (>=1.0.0rc3, <=1.1.0)

py7zr PYPI version =1.0.0rc3, =3.5.4, =1.8.0, =2.0.3, =1.0.0, =0.3.0, =1.0.1, =0.1.4, =2026.6.0b1, =0.0.0.dev0, =0.9.429, =2.4.0, =0.1.4, =0.3.1 - rebotics-sdk 0.31.1 and more Source cves: CVE-2026-55195 Source advisory: SNYK:PYTHON-PY7ZR-17391450...

atomicshop (>=3.5.4, <=3.14.22), codex (>=1.8.0, <=1.8.11) +14 more potentially affected by CVE-2026-55195 via py7zr (>=1.0.0rc3, <=1.1.0)

py7zr PYPI version =1.0.0rc3, =3.5.4, =1.8.0, =2.0.3, =1.0.0, =0.3.0, =1.0.1, =0.1.4, =2026.6.0b1, =0.0.0.dev0, =0.9.429, =2.4.0, =0.1.4, =0.3.1 - rebotics-sdk 0.31.1 and more Source cves: CVE-2026-55195 Source advisory: GHSA-GJRG-MPP7-G774...

atomicshop (>=3.5.4, <=3.14.22), codex (>=1.8.0, <=1.8.11) +14 more potentially affected by CVE-2026-23879 via py7zr (>=1.0.0rc3, <=1.1.0)

py7zr PYPI version =1.0.0rc3, =3.5.4, =1.8.0, =2.0.3, =1.0.0, =0.3.0, =1.0.1, =0.1.4, =2026.6.0b1, =0.0.0.dev0, =0.9.429, =2.4.0, =0.1.4, =0.3.1 - rebotics-sdk 0.31.1 and more Source cves: CVE-2026-23879 Source advisory: OSV:GHSA-Q6RC-2CGV-63H7...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-46580 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-46580 Source advisory: GHSA-M973-PR9R-HP2W...

@theia/ai-chat-ui (>=1.46.0-next.241, <=1.71.0-next.72), @theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72) +8 more potentially affected by CVE-2026-46580 via @theia/ai-chat (>=1.46.0-next.241, <=1.71.0-next.72)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0-next.56, =0.0.1, =1.62.0, =1.59.0-next.62, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-46580 Source advisory: GHSA-M973-PR9R-HP2W...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-46580 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-46580 Source advisory: OSV:GHSA-M973-PR9R-HP2W...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-46580 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-46580 Source advisory: SNYK:JS-THEIAAICHATUI-17391844...

@theia/ai-chat-ui (>=1.46.0-next.241, <=1.71.0-next.72), @theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72) +8 more potentially affected by CVE-2026-46580 via @theia/ai-chat (>=1.46.0-next.241, <=1.71.0-next.72)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0-next.56, =0.0.1, =1.62.0, =1.59.0-next.62, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-46580 Source advisory: OSV:GHSA-M973-PR9R-HP2W...

@theia/ai-chat-ui (>=1.46.0-next.241, <=1.71.0-next.72), @theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72) +8 more potentially affected by CVE-2026-46580 via @theia/ai-chat (>=1.46.0-next.241, <=1.71.0-next.72)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0-next.56, =0.0.1, =1.62.0, =1.59.0-next.62, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-46580 Source advisory: SNYK:JS-THEIAAICHAT-17391845...

@theia/ai-claude-code (>=1.65.0, <=1.71.0-next.72), @theia/ai-codex (>=1.67.0-next.56, <=1.71.0-next.72) +5 more potentially affected by CVE-2026-44688 via @theia/ai-chat-ui (>=1.57.0-next.37, <=1.71.0-next.72)

@theia/ai-chat-ui NPM version =1.57.0-next.37, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.71.0-next.72 Source cves: CVE-2026-44688 Source advisory: OSV:GHSA-3JWW-HXQJ-WFQ2...