Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity through the serveUpload process. An attacker can access and download content from private repositories belonging to other tenants by binding their own repository to an existing object...

CVE-2026-57280

creationtimestamp| type| source ---|---|--- 2026-06-24 21:44:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2v5sgr2r27 2026-07-01 01:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpkexekuu52l...

CVE-2026-53765 chrome-devtools-mcp: daemon.pid write follows symlinks in /tmp fallback runtime directory

Chrome DevTools for agents chrome-devtools-mcp lets your coding agent control and inspect a live Chrome browser. From 0.20.0 until 1.1.0, The chrome-devtools-mcp daemon writes its PID file with fs.writeFileSync to a deterministic runtime path. On typical macOS environments, and on Linux sessions...

MINI-XPPV-94HH-M2G4

Bulletin has no description...

MINI-7J43-JHC3-7P33

Bulletin has no description...

MINI-2VC5-XJP8-7J4Q

Bulletin has no description...

MINI-RGM7-HG3W-G72H

Bulletin has no description...

MINI-786R-RXVG-Q7JX

Bulletin has no description...

CVE-2026-4297

creationtimestamp| type| source ---|---|--- 2026-06-24 21:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp2tl5xum72l...

CVE-2026-52812

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git LFS storage is content-addressed by OID alone /// but per-repo authorization lives in the lfsobject table keyed repoid, oid. serveUpload skips re-uploading when the OID file already exists on disk and inserts a new repoid, oid r...

CVE-2026-42208 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-27708 FOSSBilling: IDOR in Servicecustom Client API allows cross-client data access

FOSSBilling is a free, open-source billing and client management system. In versions 0.7.2 and prior, the Servicecustom Client API's call method accepts an orderid parameter and fetches the associated order without verifying the authenticated client owns it, potentially exposing cross-client data...

CVE-2026-56130

creationtimestamp| type| source ---|---|--- 2026-06-24 18:58:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mp2lukil662t 2026-06-25 10:55:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4bf7ic4j2j...

CVE-2026-53122

creationtimestamp| type| source ---|---|--- 2026-06-24 18:50:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2lhhhkqw2z 2026-07-23 21:25:06+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrdrlwmbmn24...

CVE-2026-53128

creationtimestamp| type| source ---|---|--- 2026-06-24 18:45:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2l6ivx4f2c 2026-07-06 06:48:54+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 08:26:10+00:00| seen...

CVE-2026-53120

creationtimestamp| type| source ---|---|--- 2026-06-24 18:14:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2jgtpcv72o...

CVE-2026-35025

creationtimestamp| type| source ---|---|--- 2026-06-24 17:20:46+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp2ggd7tze2e 2026-06-24 17:50:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2i33pblo2p 2026-06-24 19:39:40+00:00| seen|...

CVE-2026-53031

In the Linux kernel, the following vulnerability has been resolved: bpf: Validate nodeid in arenaallocpages arenaallocpages accepts a plain int nodeid and forwards it through the entire allocation chain without any bounds checking. Validate nodeid before passing it down the allocation chain in...

DEBIAN-CVE-2026-53004

In the Linux kernel, the following vulnerability has been resolved: sctp: fix OOB write to userspace in sctpgetsockoptpeerauthchunks sctpgetsockoptpeerauthchunks checks that the caller's optval buffer is large enough for the peer AUTH chunk list with if len gauthchunks, which lives at offset...

DEBIAN-CVE-2026-52994

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix MSGZEROCOPY pinned-pages accounting virtiotransportinitzcopyskb uses iter-count as the size argument for msgzerocopyrealloc, which in turn passes it to mmaccountpinnedpages for RLIMITMEMLOCK accounting. However,...