MINI-85WJ-CG98-5968

Bulletin has no description...

MINI-H966-24G8-GGFC

Bulletin has no description...

MINI-QCQM-259C-P47J

Bulletin has no description...

MINI-JJC7-VF88-JRR6

Bulletin has no description...

MINI-JV2J-9FV3-CQF6

Bulletin has no description...

MINI-467M-VX9F-8HQQ

Bulletin has no description...

MINI-277H-CGXV-8GW7

Bulletin has no description...

MINI-5M5X-PGQ3-QFQ7

Bulletin has no description...

MINI-3F99-X6MH-Q4X3

Bulletin has no description...

MINI-G8VC-P3HV-J55M

Bulletin has no description...

MINI-CW67-VC74-93X9

Bulletin has no description...

EUVD-2026-4492

gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting CVE-2026-0755...

ECHO-3E02-3A01-4AE3

Bulletin has no description...

GHSA-2JQ4-Q6VV-4CP3

creationtimestamp| type| source ---|---|--- 2026-06-18 19:11:23+00:00| seen| https://gist.github.com/alon710/2a767af5c208a82e89707e10b62dcf61 2026-06-18 19:21:43+00:00| seen| https://gist.github.com/alon710/2aa5fa13eea204ffabb0321701e9195f...

GHSA-R253-R9JW-QG44

creationtimestamp| type| source ---|---|--- 2026-06-18 18:41:53+00:00| seen| https://gist.github.com/alon710/41babc051db96b1507f3fb804d7012be 2026-06-18 18:51:38+00:00| seen| https://gist.github.com/alon710/3807d480d537cf9538209dc130bd58ae 2026-06-18 19:02:49+00:00| seen|...

CVE-2025-32437

creationtimestamp| type| source ---|---|--- 2026-06-18 18:36:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molhuccpkl2s...

CVE-2026-46580

creationtimestamp| type| source ---|---|--- 2026-06-18 17:23:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moldrmjype2w...

GHSA-FJV8-J4P5-CR9M Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape

Summary A sandbox volume reference volumeId, which may also be a volume name was forwarded to the runner and used to build the host bind-mount source path without confinement. A reference containing path-traversal sequences could in principle resolve the mount source outside the intended per-volu...

Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape

Summary A sandbox volume reference volumeId, which may also be a volume name was forwarded to the runner and used to build the host bind-mount source path without confinement. A reference containing path-traversal sequences could in principle resolve the mount source outside the intended per-volu...

CVE-2026-54104

The U.S. Government Accountability Office GAO Electronic Protest Docketing System EPDS and Civilian Board of Contract Appeals CBCA Electronic Docketing System EDS trusts client-provided values for the 'epdsroleid' parameter without verification, allowing a remote, authenticated attacker to escala...