External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path in the database import process. An attacker can overwrite arbitrary files on the host by manipulating Xray configuration values stored in the database, potentially leading to code execution and...

CVE-2026-53541

creationtimestamp| type| source ---|---|--- 2026-06-24 18:35:02+00:00| published-proof-of-concept| https://github.com/OliveTin/OliveTin/security/advisories/GHSA-prj9-97mp-mwh2...

CGA-4M99-CC4H-5MGR

Bulletin has no description...

GHSA-4XGF-CPJX-PC3J vulnerabilities

Vulnerabilities for packages: vllm-cuda-13.2, lmcache-cuda-12.8, open-webui, litellm, tritonserver-backend-vllm-cuda-12.9, prefect-fips, airflow-core, airflow-postgres-fips, semgrep, tritonserver-backend-vllm-cuda-13.0, prefect, azureml-inference-server-http, azureml-inference-server-http-fips,...

GHSA-V3F4-W7R7-V3HM

creationtimestamp| type| source ---|---|--- 2026-06-22 05:11:16+00:00| seen| https://gist.github.com/alon710/c55617deed0f6aa3ac7d480b01fa4253...

CVE-2026-44179

creationtimestamp| type| source ---|---|--- 2026-06-21 19:03:12+00:00| published-proof-of-concept| https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-w56x-9778-rppx...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the CRI checkpoint restore plugin due to improper validation of symlinked paths. An attacker can access arbitrary files on the host by crafting a malicious checkpoint image and leveraging the...

Improper Handling of Case Sensitivity

Overview @microsoft/kiota-http-fetchlibrary is an implementation using the Fetch API to make requests. Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity via the executeWithRedirect redirect handling in redirectHandlerOptions.ts. An attacker can capture...

CVE-2026-55691

creationtimestamp| type| source ---|---|--- 2026-06-19 18:22:24+00:00| published-proof-of-concept| https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/security/advisories/GHSA-7h5p-637f-jfr7...

CVE-2026-55446

creationtimestamp| type| source ---|---|--- 2026-06-19 13:09:48+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-qwqc-p3q8-wcg9...

CVE-2026-55770

creationtimestamp| type| source ---|---|--- 2026-06-19 11:28:09+00:00| published-proof-of-concept| https://github.com/openbao/openbao/security/advisories/GHSA-6mwx-4547-5vc9...

CVE-2026-55195

creationtimestamp| type| source ---|---|--- 2026-06-19 09:32:20+00:00| published-proof-of-concept| https://github.com/miurahr/py7zr/security/advisories/GHSA-gjrg-mpp7-g774 2026-07-08 22:31:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq66cvk66i27...

CVE-2026-55206

creationtimestamp| type| source ---|---|--- 2026-06-19 09:32:10+00:00| published-proof-of-concept| https://github.com/miurahr/py7zr/security/advisories/GHSA-h4gh-22qq-72r7 2026-07-08 22:39:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq66rc3cyn2i...

CVE-2026-23879

creationtimestamp| type| source ---|---|--- 2026-06-19 09:31:59+00:00| published-proof-of-concept| https://github.com/miurahr/py7zr/security/advisories/GHSA-q6rc-2cgv-63h7 2026-06-24 22:16:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp2wxlnzkj2d 2026-06-24 23:14:35+00:00|...

CVE-2026-25119

creationtimestamp| type| source ---|---|--- 2026-06-19 02:22:56+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-w6j9-vw59-27wv...

CVE-2026-52807

creationtimestamp| type| source ---|---|--- 2026-06-19 02:19:30+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-vcm5-gvmp-78mp...

CVE-2026-52811

creationtimestamp| type| source ---|---|--- 2026-06-19 02:18:08+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-89mr-xqfv-758m 2026-06-24 22:53:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2yysdqds2t...

CVE-2026-52813

creationtimestamp| type| source ---|---|--- 2026-06-19 02:17:38+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-c39w-43gm-34h5 2026-06-24 23:03:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2zkpdboz2l 2026-06-30 17:00:16+00:00|...

Insufficiently Protected Credentials

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Insufficiently Protected Credentials in the backup process. An attacker can obtain sensitive account credentials and configuration secrets by...

CVE-2026-55229

creationtimestamp| type| source ---|---|--- 2026-06-18 13:04:54+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2mrg-35hw-x3x9 2026-07-11 13:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqeptauyzd2r 2026-07-13 23:37:05+00:00| seen|...