MINI-JGCG-9PJ5-M3XV

Bulletin has no description...

MINI-2W42-35C4-QVGF

Bulletin has no description...

GHSA-36QX-FR4F-26G5

creationtimestamp| type| source ---|---|--- 2026-07-15 19:00:46+00:00| seen| https://gist.github.com/rodrigo-arias/52b0854a2e57501b04c4c8d6728a34ea...

SUSE CVE-2026-59885

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small crafted payload containing an OID with many arcs consumes excessive CPU per decode call and c...

GHSA-8Q6Q-M837-FV64

creationtimestamp| type| source ---|---|--- 2026-07-15 18:32:06+00:00| seen| https://gist.github.com/alon710/93e1535b55e3d3a6b392785e4c9401da...

pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER

A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One ASN.1. The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload...

CVE-2026-45337

Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the deviceAuthorization plugin treats any authenticated session as the owner of any pending device code because GET /device does not claim the row and POST /device/approve and POST /device/deny...

CVE-2026-62287

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61873. Reason: This candidate is a duplicate of CVE-2026-61873. Notes: All CVE users should reference CVE-2026-61873 instead of this candidate...

CVE-2026-62180

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61440. Reason: This candidate is a duplicate of CVE-2026-61440. Notes: All CVE users should reference CVE-2026-61440 instead of this candidate...

CVE-2026-54563

creationtimestamp| type| source ---|---|--- 2026-07-15 17:17:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp7zq7njw22 2026-08-26 16:35:10+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-w5fv-7x5q-g8qp...

CVE-2026-59954

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.2, Apollo ConfigService may allow unauthorized access to configuration data when AccessKey or management key authentication is enabled because ConfigService can accept a...

CVE-2026-20150

creationtimestamp| type| source ---|---|--- 2026-07-15 17:11:14+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116925102408110334 2026-07-15 19:01:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpftydweo22 2026-07-16 13:00:29+00:00| seen|...

CVE-2026-58660

Kanboard through 1.2.52, fixed in commit 564cc30, BoardAjaxController save method used by the kanban board drag-and-drop endpoint validates the caller's role on the attacker-supplied projectid but never verifies that the supplied taskid actually belongs to that project. Because task identifiers a...

CVE-2026-62294

creationtimestamp| type| source ---|---|--- 2026-07-15 17:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp7a4ktc32s 2026-07-23 19:59:49+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mrdmtg2tub2n...

CVE-2026-62178

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61427. Reason: This candidate is a duplicate of CVE-2026-61427. Notes: All CVE users should reference CVE-2026-61427 instead of this candidate...

CVE-2025-32781

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.0, Apollo Portal does not verify application and namespace permissions when an authenticated user requests a release by ID through GET /envs/env/releases/releaseId while...

CVE-2025-32781 Apollo: Apollo Portal release endpoint allows cross-application configuration disclosure via releaseId

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.0, Apollo Portal does not verify application and namespace permissions when an authenticated user requests a release by ID through GET /envs/env/releases/releaseId while...

EUVD-2026-44725

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.2, Apollo ConfigService may allow unauthorized access to configuration data when AccessKey or management key authentication is enabled because ConfigService can accept a...

CVE-2026-61873

creationtimestamp| type| source ---|---|--- 2026-07-15 16:14:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp4jgjut22x...

CVE-2026-44986

creationtimestamp| type| source ---|---|--- 2026-07-15 15:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2zwwfih2x 2026-07-16 09:01:34+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqqurwh7u42e 2026-07-16 09:01:50+00:00| seen|...