72350 matches found
LangGraph SDK has unsafe URL path construction
Summary langgraph-sdk constructs HTTP request paths for resource operations by interpolating caller-supplied identifier values into URL templates. Without sanitization of those values, identifiers that contain characters with special meaning in URL paths could cause the resulting request to addre...
CVE-2026-50015
creationtimestamp| type| source ---|---|--- 2026-06-25 18:30:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp52rdwmyw2u 2026-06-27 00:35:29+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-rxhj-4m44-96r4 2026-06-29 23:01:49+00:00| seen|...
GO-2026-5178 free5GC UDR has improper `ueId` validation in EE subscription handlers that allows arbitrary identifier persistence in github.com/free5gc/udr
free5GC UDR has improper ueId validation in EE subscription handlers that allows arbitrary identifier persistence in github.com/free5gc/udr...
CVE-2026-50021
creationtimestamp| type| source ---|---|--- 2026-06-25 18:20:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp52ap4dzc2z 2026-06-27 00:35:37+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-q6j5-fjx5-2mc3...
CVE-2026-56772 NewsBlur < 14.5.0 - Insecure Direct Object Reference in Social Interactions Endpoint
NewsBlur before 14.5.0 contains a broken access control vulnerability that allows authenticated users to read private notification feeds by supplying arbitrary userid values to the GET /social/interactions endpoint without ownership verification. Attackers can enumerate userid values to access...
CVE-2026-48995
creationtimestamp| type| source ---|---|--- 2026-06-25 18:03:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4zb2p3uk2s 2026-06-26 22:35:40+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-hg3w-7f8c-63hp 2026-06-29 22:43:27+00:00| seen|...
CVE-2026-55699
creationtimestamp| type| source ---|---|--- 2026-06-25 18:01:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4z57mqql2z 2026-06-27 00:35:02+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-4gxm-v5v7-fqc4 2026-06-29 23:04:39+00:00| seen|...
CVE-2026-50017
creationtimestamp| type| source ---|---|--- 2026-06-25 17:52:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4yn7uldp2j...
CVE-2026-44622
creationtimestamp| type| source ---|---|--- 2026-06-25 17:15:21+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-02 2026-06-25 22:01:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5gkqc4w42u...
CGA-M33W-FCQ7-WMG3
Bulletin has no description...
CGA-3M3Q-FMHW-RJM8
Bulletin has no description...
CVE-2026-56053
creationtimestamp| type| source ---|---|--- 2026-06-25 15:15:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4pv42j7s2j 2026-07-07 05:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpztyiy63o24...
CVE-2026-57434
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain methods on allocated-but-uninitialized native wrapper classes that inherit from Nokogiri::XML::Node. This caused a NULL pointer dereference that could...
MINI-PMXP-J684-Q8W2
Bulletin has no description...
MINI-5G84-FF2F-CCQH
Bulletin has no description...
MINI-5G6R-22VX-RRP9
Bulletin has no description...
MINI-2836-XXX7-C2MG
Bulletin has no description...
CGA-6CRF-CGJ2-8HQ7
Bulletin has no description...
