MINI-PGVP-97HJ-4865

Bulletin has no description...

CVE-2026-1764

creationtimestamp| type| source ---|---|--- 2026-06-16 04:10:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moewkmggos2j...

CGA-9F3W-26VM-JCH7

Bulletin has no description...

GHSA-MXFR-6HCW-J9RQ

creationtimestamp| type| source ---|---|--- 2026-06-16 03:07:04+00:00| seen| https://gist.github.com/Julius-mercator/b78185acb27329feb3508768444bd583...

GHSA-99F4-GRH7-6PCQ vulnerabilities

Vulnerabilities for packages: langfuse, pulumi, jitsucom-jitsu...

CVE-2026-48068 vulnerabilities

Vulnerabilities for packages: langfuse, pulumi, jitsucom-jitsu...

PT-2026-50181

Name of the Vulnerable Software and Affected Versions Daytona versions prior to 0.185.0 Description Organization role update and delete endpoints authorized the caller as an owner of the organization in the request path but mutated the target role using only its identifier without verifying the...

CVE-2026-39949

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

GHSA-5W86-C3RQ-VJJ7

creationtimestamp| type| source ---|---|--- 2026-06-15 23:11:08+00:00| seen| https://gist.github.com/alon710/6e083e538662dc872931a903f1bab93e...

CVE-2026-11850

creationtimestamp| type| source ---|---|--- 2026-06-15 22:40:51+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3moee4eyg372o 2026-07-21 12:01:10+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r5pjbkd2z 2026-07-29 12:01:42+00:00| seen|...

CVE-2026-52700

creationtimestamp| type| source ---|---|--- 2026-06-15 22:01:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moebwj2hkn26 2026-06-15 22:02:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moebymanjo2b...

GHSA-999R-QQ7V-R334

creationtimestamp| type| source ---|---|--- 2026-06-15 21:41:17+00:00| seen| https://gist.github.com/alon710/35567f659305b91f7bbc4ee7db5dd621...

Nuxt: Dev server discloses project absolute path and persistent workspace UUID via `/.well-known/appspecific/com.chrome.devtools.json`

Summary When running nuxt dev, Nuxt registers an unauthenticated route at /.well-known/appspecific/com.chrome.devtools.json that returns the absolute filesystem path of the project root and a per-project UUID persisted to nodemodules/.cache/nuxt/chrome-workspace.json. The route is enabled by...

GHSA-RQ7W-G337-39QQ Nuxt: Dev server discloses project absolute path and persistent workspace UUID via `/.well-known/appspecific/com.chrome.devtools.json`

Summary When running nuxt dev, Nuxt registers an unauthenticated route at /.well-known/appspecific/com.chrome.devtools.json that returns the absolute filesystem path of the project root and a per-project UUID persisted to nodemodules/.cache/nuxt/chrome-workspace.json. The route is enabled by...

CVE-2026-52719

creationtimestamp| type| source ---|---|--- 2026-06-15 20:26:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe4m3klva2b...

CVE-2026-53705

creationtimestamp| type| source ---|---|--- 2026-06-15 20:23:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe4gpjlgt2w...

MINI-RMQH-XWRW-H2FF

Bulletin has no description...

MINI-76FV-2425-FWR8

Bulletin has no description...

CVE-2026-39502 WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability

Unauthenticated SQL Injection in Form Maker by 10Web = 1.15.38 versions...

CVE-2026-49763

creationtimestamp| type| source ---|---|--- 2026-06-15 20:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3moe3zo2fpv2e 2026-06-15 21:18:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe7iiuzpc2b 2026-06-16 03:00:53+00:00| seen|...