CVE-2026-48791

creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:25+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-qqw8-7c2r-jxch 2026-08-13 04:15:10+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-48791...

CVE-2026-48592

creationtimestamp| type| source ---|---|--- 2026-07-01 02:50:18+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-389x-rgxr-8m33...

Replay Attack

Overview Affected versions of this package are vulnerable to Replay Attack via the Assertion Consumer Service ACS process. An attacker can gain unauthorized access by replaying previously captured SAML assertions during authentication. Remediation Upgrade...

GHSA-43W5-MMXV-CPVH vulnerabilities

Vulnerabilities for packages: airbyte-server, airbyte-server-fips...

CVE-2026-47067

creationtimestamp| type| source ---|---|--- 2026-06-27 00:35:54+00:00| published-proof-of-concept| https://github.com/benoitc/hackney/security/advisories/GHSA-9653-rcfr-5c62...

CVE-2026-49342

creationtimestamp| type| source ---|---|--- 2026-06-27 00:35:42+00:00| published-proof-of-concept| https://github.com/lsegal/yard/security/advisories/GHSA-pxcc-8665-phx8...

CVE-2026-49338

creationtimestamp| type| source ---|---|--- 2026-06-27 00:35:07+00:00| published-proof-of-concept| https://github.com/sentriz/gonic/security/advisories/GHSA-hmgp-w9jm-vp95...

CVE-2026-49340

creationtimestamp| type| source ---|---|--- 2026-06-26 23:42:14+00:00| seen| https://gist.github.com/alon710/aef49efca881722a2606f374108f34f4 2026-06-27 00:00:58+00:00| seen| https://gist.github.com/alon710/aef49efca881722a2606f374108f34f4 2026-06-27 00:35:12+00:00| published-proof-of-concept|...

GHSA-M727-PCJM-J28H

creationtimestamp| type| source ---|---|--- 2026-06-26 22:45:45+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mp7zjccddf2o...

CVE-2026-48990

creationtimestamp| type| source ---|---|--- 2026-06-26 22:35:29+00:00| published-proof-of-concept| https://github.com/authlib/joserfc/security/advisories/GHSA-wphv-vfrh-23q5...

CVE-2026-47071

creationtimestamp| type| source ---|---|--- 2026-06-26 22:35:15+00:00| published-proof-of-concept| https://github.com/benoitc/hackney/security/advisories/GHSA-gp9c-pm5m-5cxr...

CVE-2026-47076

creationtimestamp| type| source ---|---|--- 2026-06-26 22:35:12+00:00| published-proof-of-concept| https://github.com/benoitc/hackney/security/advisories/GHSA-pj7v-xfvx-wmjq...

CVE-2026-49359

creationtimestamp| type| source ---|---|--- 2026-06-26 22:28:37+00:00| seen| https://bsky.app/profile/suriq.io/post/3mp7ykmyves2b 2026-06-27 00:35:49+00:00| published-proof-of-concept| https://github.com/pontedilana/php-weasyprint/security/advisories/GHSA-x8g9-h984-pc36...

CVE-2026-48749

creationtimestamp| type| source ---|---|--- 2026-06-26 20:35:27+00:00| published-proof-of-concept| https://github.com/lxc/incus/security/advisories/GHSA-2q3f-q5pq-g8wv 2026-07-07 20:48:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq3i2ziva52f 2026-08-21 16:07:30+00:00| see...

CVE-2026-48756

creationtimestamp| type| source ---|---|--- 2026-06-26 20:35:10+00:00| published-proof-of-concept| https://github.com/lxc/incus/security/advisories/GHSA-xhqx-mgh3-3h7q...

CVE-2026-48769

creationtimestamp| type| source ---|---|--- 2026-06-26 20:35:07+00:00| published-proof-of-concept| https://github.com/lxc/incus/security/advisories/GHSA-f6m5-xw2g-xc4x 2026-07-01 02:15:18+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpkh3n7jjr2b 2026-07-01 02:31:46+00:00...

CVE-2026-48529

creationtimestamp| type| source ---|---|--- 2026-06-25 22:35:05+00:00| published-proof-of-concept| https://github.com/github/github-mcp-server/security/advisories/GHSA-pjp5-fpmr-3349 2026-06-26 18:26:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7l26lvbx2l...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the selector lexer process. An attacker can cause a panic and potentially disrupt service availability by providing a quoted string with a trailing backslash. Remediation There is no fixed version...

GHSA-V2J6-3Q6Q-GM3G vulnerabilities

Vulnerabilities for packages: expat...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the unauthenticated router-key and mcp-init-host paths. An attacker can gain unauthorized access or bypass authentication controls by sending crafted requests to these endpoints. Remediation Upgrade...