MINI-3M5M-6J7C-654F

Bulletin has no description...

MINI-PCJR-6QGG-5CG8

Bulletin has no description...

MINI-63QW-J7W6-HQ77

Bulletin has no description...

GHSA-XPP7-93X6-V29M

creationtimestamp| type| source ---|---|--- 2026-08-05 00:31:06+00:00| seen| https://gist.github.com/alon710/3fbc424d9726688cb9c9bb1b3b35fa73...

ECHO-9CAB-61A6-AEBD

Bulletin has no description...

GHSA-CHGM-3698-JM42

creationtimestamp| type| source ---|---|--- 2026-08-04 23:31:07+00:00| seen| https://gist.github.com/alon710/c4a761947b80459c983e02321c736c9a 2026-08-05 00:00:39+00:00| seen| https://gist.github.com/alon710/c4a761947b80459c983e02321c736c9a...

CVE-2026-45537

OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the constructuri function concatenates multiple URI components protocol, username, domain, port, params into a fixed 1024-byte global BSS buffer without any bounds checking. When a routi...

GHSA-XM43-3M56-W3WF

creationtimestamp| type| source ---|---|--- 2026-08-04 22:31:36+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6 2026-08-05 00:00:39+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6...

GHSA-3CG5-48J3-V4GV

creationtimestamp| type| source ---|---|--- 2026-08-04 21:31:22+00:00| seen| https://gist.github.com/alon710/e57220ec033758e1c7ba8d20ade18b9d...

CVE-2026-66902

creationtimestamp| type| source ---|---|--- 2026-08-04 21:24:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/5jerlnuteddya 2026-08-05 20:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedshg2v22h 2026-08-06 12:32:03+00:00| seen|...

CVE-2026-70487

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, inline direct model metadata accepted client-supplied knowledge attachments without filtering them against the caller's read access. Any authenticated user who knew another user's file i...

ECHO-4652-B79B-C705

Bulletin has no description...

ECHO-1B10-505E-409C

Bulletin has no description...

ECHO-784F-603D-C633

Bulletin has no description...

GHSA-M8RV-5G2X-5CG5 vulnerabilities

Vulnerabilities for packages: vitess, code-server, saf, renovate, langfuse, pulumi, npm, prism...

CGA-7234-5HJ8-J5Q9

Bulletin has no description...

MINI-4P6G-9WM3-34CF

Bulletin has no description...

MINI-FV6X-7258-8Q3P

Bulletin has no description...

CVE-2026-70478

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the POST /api/v1/oauth2-credential/refresh/:credentialId endpoint is included in WHITELISTURLS and requires no authentication. The endpoint decrypts the stored credential, sends a refresh...

CVE-2026-70478

Summary of CVE-2026-70478 (Flowise) : The unauthenticated endpoint POST /api/v1/oauth2-credential/refresh/:credentialId is exposed via WHITELIST_URLS and decrypts the stored credential to perform an OAuth token refresh, returning a new access_token in the response. An attacker with a valid creden...