CVE-2026-28410

creationtimestamp| type| source ---|---|--- 2026-03-05 21:49:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdrnyedoi2x...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the milestone selection. An attacker can execute arbitrary JavaScript code in the context of another user's browser by storing a crafted HTML or JavaScript payload in a repository's milestone name, which is...

CVE-2026-30832

creationtimestamp| type| source ---|---|--- 2026-03-05 21:10:15+00:00| published-proof-of-concept| https://github.com/charmbracelet/soft-serve/security/advisories/GHSA-3fvx-xrxq-8jvv 2026-03-07 15:15:55+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30832...

Gokapi has CSRF in Login Endpoint

Summary The login flow accepts credential-bearing requests without CSRF protection mechanisms tied to the browser session context. The handler parses form values directly and creates a session on successful credential validation. Issue found by aisafe.io Impact An attacker can force a victim...

CVE-2026-28118

creationtimestamp| type| source ---|---|--- 2026-03-05 19:33:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdk3oxtlt2h...

CVE-2026-24457

creationtimestamp| type| source ---|---|--- 2026-03-05 19:33:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdk3bgqqg2c...

CVE-2025-66678

creationtimestamp| type| source ---|---|--- 2026-03-05 19:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdibmy3uv2n 2026-06-08 09:48:18+00:00| seen| https://gist.github.com/harvey7092/9fdcae180558f96fe75b1dbb492d9227...

CVE-2026-30798

creationtimestamp| type| source ---|---|--- 2026-03-05 18:48:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdhl4ebkn27 2026-03-07 02:38:05+00:00| seen| https://bsky.app/profile/secqube.com/post/3mggsblxioo2y...

CVE-2026-30793

creationtimestamp| type| source ---|---|--- 2026-03-05 18:33:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdgqaypbp2e...

CVE-2026-30796

creationtimestamp| type| source ---|---|--- 2026-03-05 18:15:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdfpxkgx22e...

CVE-2026-30783

creationtimestamp| type| source ---|---|--- 2026-03-05 18:12:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdfjyi4rl2k...

CVE-2026-30791

creationtimestamp| type| source ---|---|--- 2026-03-05 18:09:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdfem3cuf27 2026-03-06 10:34:05+00:00| seen| https://bsky.app/profile/secqube.com/post/3mgf4ftomkg2o...

CVE-2026-26377

creationtimestamp| type| source ---|---|--- 2026-03-05 18:03:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdf3acl5i2e...

CVE-2026-30789

creationtimestamp| type| source ---|---|--- 2026-03-05 17:48:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdeajpat727...

CVE-2025-68553

creationtimestamp| type| source ---|---|--- 2026-03-05 17:23:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdcstjowp26...

CVE-2026-28125

creationtimestamp| type| source ---|---|--- 2026-03-05 15:18:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgd3sn4ttn2d...

CVE-2025-64166

creationtimestamp| type| source ---|---|--- 2026-03-05 14:34:53+00:00| published-proof-of-concept| https://github.com/mercurius-js/mercurius/security/advisories/GHSA-v66j-6wwf-jc57 2026-03-05 17:53:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdej53i4324...

CVE-2026-30247

creationtimestamp| type| source ---|---|--- 2026-03-05 13:55:27+00:00| published-proof-of-concept| https://github.com/Tencent/WeKnora/security/advisories/GHSA-595m-wc8g-6qgc 2026-03-07 06:59:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghavbu5gv2u...

EUVD-2026-9817

In affected versions of Octopus Server it was possible to create a new API key from an existing access token resulting in the new API key having a lifetime exceeding the original API key used to mint the access token...

CVE-2026-3236

In affected versions of Octopus Server it was possible to create a new API key from an existing access token resulting in the new API key having a lifetime exceeding the original API key used to mint the access token...