59143 matches found
GHSA-5P4M-2WFM-XMQJ
creationtimestamp| type| source ---|---|--- 2026-08-07 22:06:55+00:00| seen| https://gist.github.com/gomesalexandre/8cd74b41b9830109d823dcb777041502 2026-09-03 19:24:03+00:00| seen| https://gist.github.com/konard/05d19a59942ef51514e30abcc55dbc13 2026-09-03 20:23:57+00:00| seen|...
GHSA-FP3F-MC75-235C
creationtimestamp| type| source ---|---|--- 2026-08-07 20:34:02+00:00| seen| https://gist.github.com/alon710/51a19d7e4b20307e86a86a2096f8e2e7...
CVE-2026-71870
creationtimestamp| type| source ---|---|--- 2026-08-07 20:34:02+00:00| seen| https://gist.github.com/alon710/51a19d7e4b20307e86a86a2096f8e2e7...
CVE-2026-28144
creationtimestamp| type| source ---|---|--- 2026-08-07 20:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msjeoojgau22...
SUSE-SU-2026:3536-1 Security update for podman
This update for podman fixes the following issues: - CVE-2026-55686: specially crafted image where the WORKDIR path contains a symlink allows for directory creation and ownership modification on the host filesystem bsc1268579. - CVE-2026-57231: specially crafted image can trick podman run into...
GHSA-FWG2-594C-JP42
creationtimestamp| type| source ---|---|--- 2026-08-07 19:36:23+00:00| seen| https://gist.github.com/alon710/81b96826f50cad7313904ff9c7c75f2e...
CVE-2026-71558
creationtimestamp| type| source ---|---|--- 2026-08-07 19:10:14+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msjb2dlrwh2r...
CVE-2026-17435
File::Rotate::Simple for Perl
CVE-2026-17435 File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files
File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files. When the file to be rotated is a symbolic link to a missing file, and the touch option is enabled, then the rotate method assumes that the file is absent since the existence check is...
CVE-2026-17435 File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files
File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files. When the file to be rotated is a symbolic link to a missing file, and the touch option is enabled, then the rotate method assumes that the file is absent since the existence check is...
CVE-2026-67585 Atom Exhaustion via _entities Representation Keys in DivvyPayHQ absinthe_federation
Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthefederation allows an unauthenticated remote attacker to abort the Erlang VM via crafted entities representation keys. Every key of every object in the representations argument of the federation-mandated...
GHSA-WVPP-8HX9-P66J
creationtimestamp| type| source ---|---|--- 2026-08-07 16:40:33+00:00| seen| https://gist.github.com/alon710/7b081fe119ed64f00c308eff03c67cc3...
CVE-2026-17594
CVE-2026-17594 affects Nexus Repository 3 CE/Pro versions 3.0.0–3.94.x. The root cause is an authorization mismatch in the repository-creation UI: a delegated repository-admin (scoped to a specific format) could cause a repository of a different, unauthorized format to be created because authoriz...
CVE-2026-17594 Nexus Repository 3 - Authorization Bypass in Repository Creation
Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability CWE-863 in the repository-creation user interface. An individual user account holding a delegated repository-admin privilege scoped to a specific repository format could create a repository of...
CVE-2026-17598
Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...
CVE-2024-24210
creationtimestamp| type| source ---|---|--- 2026-08-07 16:02:15+00:00| seen| Telegram/f4Vytjn-MRLHBVgNi9AN52s9pui8b8Txh36DWLXfR9Gx-I 2026-08-08 00:04:27+00:00| seen| Telegram/f4Vytjn-MRLHBVgNi9AN52s9pui8b8Txh36DWLXfR9Gx-I...
External Control of File Name or Path
Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to External Control of File Name or Path via the handling of submodule names in the .gitmodules configuration. An attacker can cause arbitrary directories and Git...
GHSA-HMQ2-W58F-27JC GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython
Summary GitPython computes the on-disk location of a submodule's separate Git directory .git/modules/ from the submodule's .gitmodules section name with no validation. Because that name is fully attacker-controlled content of a cloned repository, a malicious repository can set a submodule name to...