CVE-2026-53727

creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:05+00:00| published-proof-of-concept| https://github.com/premailer/cssparser/security/advisories/GHSA-9pmc-p236-855h 2026-07-18 00:15:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquydfuuou2q...

GHSA-GV7V-RGG6-548H

creationtimestamp| type| source ---|---|--- 2026-07-09 03:00:12+00:00| seen| https://t.me/brutsecurity/1117 2026-07-10 00:00:35+00:00| seen| https://t.me/brutsecurity/1117 2026-07-11 16:00:02+00:00| published-proof-of-concept| https://t.me/brutsecurity/1117 2026-07-12 00:00:45+00:00|...

GHSA-W8W6-F4MM-HW75 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-qemu-melange, linux-azure, linux-vmware, linux-gcp...

GHSA-5F39-WJPQ-XRRJ vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-vmware, linux-gcp...

GHSA-36GR-GW56-G35V vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-vmware, linux-gcp...

GHSA-5RWX-CQG3-893X vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-vmware, linux-gcp...

GHSA-QC6F-VG59-3945 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-vmware, linux-gcp...

GHSA-2P59-XC6P-6W7C vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-azure, linux-vmware, linux-gcp...

PT-2026-56799

A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /returnApply/create of the component Portal Endpoint. The manipulation of the argument orderId leads to improper control of resource identifiers. The attack can be initiated remotely. The...

PT-2026-57006

Name of the Vulnerable Software and Affected Versions GitHub CLI gh versions 2.10.0 through 2.95.0 Description Connecting to a malicious Codespace using the gh codespace jupyter command can lead to command execution. This occurs because the tool opens a JupyterLab URL provided by a process within...

CVE-2026-59831: Inclusion of Functionality from Untrusted Control Sphere

GitHub CLI gh is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopbac...

PT-2026-57017

The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in versions up to, and including, 6.2.3. The vulnerability exists in the loginpress on github login function, which blindly trusts the first element profile0'email' of the array returned b...

CVE-2026-53600

creationtimestamp| type| source ---|---|--- 2026-07-08 22:35:10+00:00| published-proof-of-concept| https://github.com/dignifiedquire/async-tar/security/advisories/GHSA-35rm-7j9c-2f7m...

CVE-2026-49455

creationtimestamp| type| source ---|---|--- 2026-07-08 22:35:05+00:00| published-proof-of-concept| https://github.com/wakujs/waku/security/advisories/GHSA-75w3-gmqx-993q...

GHSA-VMWX-M75V-QVCH

creationtimestamp| type| source ---|---|--- 2026-07-08 22:12:23+00:00| seen| https://gist.github.com/alon710/f5073530cad3dd719e641dcee2ba88b8...

GHSA-MXWC-WH95-PW4G

creationtimestamp| type| source ---|---|--- 2026-07-08 21:12:14+00:00| seen| https://gist.github.com/alon710/f9b0746c1419f68b39813326daf32fa7...

GHSA-MX76-R943-RF8G vulnerabilities

Vulnerabilities for packages: opensearch...

GHSA-G4RG-993R-MGX7 vulnerabilities

Vulnerabilities for packages: py3-captum...

DEBIAN-CVE-2026-59947

Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, when Composer is run with -vvv debug verbosity, it could print a credential embedded in the username slot of a repository or package URL, such as a GitHub Personal Access Token in https://TOKEN@host/, to debug outp...

CVE-2026-59947 Composer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exposure)

Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, when Composer is run with -vvv debug verbosity, it could print a credential embedded in the username slot of a repository or package URL, such as a GitHub Personal Access Token in https://TOKEN@host/, to debug outp...