34883 matches found
GHSA-JQHH-CJMQ-VMV6
creationtimestamp| type| source ---|---|--- 2026-09-10 02:31:55+00:00| seen| https://gist.github.com/alon710/401536538bb41a7576b21df62b940fb2...
CVE-2026-59158
creationtimestamp| type| source ---|---|--- 2026-09-10 00:35:17+00:00| published-proof-of-concept| https://github.com/thoda-dev/nuxt-ollama/security/advisories/GHSA-fxg7-897c-57mp...
CVE-2026-59160
creationtimestamp| type| source ---|---|--- 2026-09-10 00:35:15+00:00| published-proof-of-concept| https://github.com/DerYeger/yeger/security/advisories/GHSA-2r5q-h53f-9rp3 2026-09-10 04:01:24+00:00| seen| https://gist.github.com/ichintu/d78ea836a25ff89ea1b8a699d08a5b4d 2026-09-15 18:01:51+00:00|...
CVE-2026-59176
creationtimestamp| type| source ---|---|--- 2026-09-10 00:35:13+00:00| published-proof-of-concept| https://github.com/jordanburke/functype/security/advisories/GHSA-wcjj-9m6g-2fr2...
CVE-2026-59179
creationtimestamp| type| source ---|---|--- 2026-09-10 00:35:11+00:00| published-proof-of-concept| https://github.com/naorsabag/openhop/security/advisories/GHSA-g72f-jw3w-mgh7...
CVE-2026-56341
creationtimestamp| type| source ---|---|--- 2026-09-10 00:35:09+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-wprj-9cvc-5w37...
CVE-2026-88002
creationtimestamp| type| source ---|---|--- 2026-09-10 00:35:06+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-jqhh-cjmq-vmv6 2026-09-10 02:31:55+00:00| seen| https://gist.github.com/alon710/401536538bb41a7576b21df62b940fb2...
CVE-2026-88001
creationtimestamp| type| source ---|---|--- 2026-09-10 00:35:04+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-5x7x-4c3c-qf5w 2026-09-10 01:32:33+00:00| seen| https://gist.github.com/alon710/855b51c2ea136c7c49beab7d27d1ef40...
GHSA-3CGP-3CQX-J8W2
creationtimestamp| type| source ---|---|--- 2026-09-10 00:32:33+00:00| seen| https://gist.github.com/alon710/48cdccd93c734ae28b1351fbe3368bd9...
CVE-2026-88881: URL Redirection to Untrusted Site
Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...
PT-2026-89392
Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...
PT-2026-89735
CI Branch Name OS Command Injection in @argos-ci/core Summary @argos-ci/[email protected] passes attacker-controlled CI branch/ref strings directly into an execSync template literal in packages/core/src/ci-environment/git.ts:89. When a CI project has hasRemoteContentAccess: false, the Argos upload flow...
PT-2026-89720
Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0...
Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without ownership verification
Summary identrail's GitHub App connection-completion endpoint binds a fully client-supplied installationid to the caller's workspace without verifying that the installation belongs to, or was installed by, the workspace that initiated the connect flow. identrail then mints a GitHub App installati...
GHSA-CP3J-M783-3PH5 Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without ownership verification
Summary identrail's GitHub App connection-completion endpoint binds a fully client-supplied installationid to the caller's workspace without verifying that the installation belongs to, or was installed by, the workspace that initiated the connect flow. identrail then mints a GitHub App installati...
CVE-2026-56855
creationtimestamp| type| source ---|---|--- 2026-09-09 22:34:08+00:00| seen| https://gist.github.com/cwayne18/3474f4393a3ce289f2538aee39a18778 2026-09-10 00:01:53+00:00| seen| https://gist.github.com/cwayne18/3474f4393a3ce289f2538aee39a18778...
CVE-2026-78662
creationtimestamp| type| source ---|---|--- 2026-09-09 22:34:08+00:00| seen| https://gist.github.com/cwayne18/3474f4393a3ce289f2538aee39a18778 2026-09-10 00:01:53+00:00| seen| https://gist.github.com/cwayne18/3474f4393a3ce289f2538aee39a18778...
MAL-2026-16103 Malicious code in @neroxkira/vangal-baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af1543fb92f079191de134bd36dbb64c340928804df8486acf43546e2c6e185 package.json declares libsignal with the source github:RILLYZY/libsignal-node, an unpinned reference to a third-party GitHub repository with no tag o...
Malicious code in @neroxkira/vangal-baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af1543fb92f079191de134bd36dbb64c340928804df8486acf43546e2c6e185 package.json declares libsignal with the source github:RILLYZY/libsignal-node, an unpinned reference to a third-party GitHub repository with no tag o...