CVE-2026-21023

creationtimestamp| type| source ---|---|--- 2026-04-29 06:41:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkmil32qwa2k...

CVE-2026-23773

creationtimestamp| type| source ---|---|--- 2026-04-29 06:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkmgcc7efl2f 2026-04-29 06:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116486466851650653 2026-04-29 06:31:11+00:00| seen|...

CVE-2026-2519

creationtimestamp| type| source ---|---|--- 2026-04-29 05:32:04+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkmepjgstg2c...

CVE-2026-38949

Cross-Site Scripting XSS vulnerability exists in HTMLy version 3.1.1 in the content creation functionality at the /add/content?type=image endpoint. The application fails to properly sanitize user input, allowing injection of arbitrary code...

CVE-2026-41649

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

CVE-2026-7291

creationtimestamp| type| source ---|---|--- 2026-04-28 21:15:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklix4i7rf2k...

Embedded Malicious Code

Overview @cap-js/postgres is a CDS database service for Postgres Affected versions of this package are vulnerable to Embedded Malicious Code that conceals an obfuscated payload designed to steal developer credentials during the package installation. The malicious versions and their contents are...

CVE-2026-42423

creationtimestamp| type| source ---|---|--- 2026-04-28 20:43:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklh6xa6y52k...

CVE-2026-7292

creationtimestamp| type| source ---|---|--- 2026-04-28 20:29:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklgendiy32c...

CVE-2026-42429

creationtimestamp| type| source ---|---|--- 2026-04-28 20:25:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklg64g6io2q...

CVE-2026-42431

creationtimestamp| type| source ---|---|--- 2026-04-28 20:20:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklfvlw2dx2e 2026-04-28 20:31:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklgia46ed2e 2026-04-29 01:00:42+00:00| seen|...

CVE-2026-41649 Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

CVE-2026-41649 Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

CVE-2026-6970

creationtimestamp| type| source ---|---|--- 2026-04-28 20:11:02+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3mklfebpkit2s 2026-05-01 07:03:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mkrkpz77ed26 2026-05-06 07:40:29+00:00| seen|...

CVE-2026-7351

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:35:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklu5o2z2n2k 2026-05-03 18:00:00+00:00| seen|...

CVE-2026-7346

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:33:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkltzjp3az2h 2026-05-03 18:00:00+00:00| seen|...

CVE-2026-7348

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:41:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklugzsstg2e 2026-05-03 18:00:00+00:00| seen|...

CVE-2026-7361

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 01:00:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklvjpue7m2p 2026-04-29 04:10:36+00:00| seen|...

CVE-2026-7363

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 01:20:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklwnjlgsb2h 2026-05-01 02:56:14+00:00| seen|...

CVE-2026-42486

creationtimestamp| type| source ---|---|--- 2026-04-28 18:38:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkla62aalt24 2026-04-29 12:50:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56ry53l2c 2026-04-29 17:13:58+00:00| seen|...