CVE-2026-13948

creationtimestamp| type| source ---|---|--- 2026-07-01 21:08:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgfxjq4k2l 2026-07-02 07:46:57+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:19:38+00:00| seen|...

CVE-2026-13935

creationtimestamp| type| source ---|---|--- 2026-07-01 21:05:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgajevnu2r 2026-07-02 04:24:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6sgwjho2q 2026-07-02 07:46:28+00:00| seen|...

CVE-2026-13951

creationtimestamp| type| source ---|---|--- 2026-07-01 20:59:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmfw7hdjs22 2026-07-02 07:47:04+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:19:45+00:00| seen|...

CVE-2026-13769

creationtimestamp| type| source ---|---|--- 2026-07-01 20:56:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmfq3gnpv2k 2026-07-02 10:31:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpntbtogez2q 2026-07-02 10:31:29+00:00| seen|...

CVE-2026-13950

creationtimestamp| type| source ---|---|--- 2026-07-01 20:54:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmfmcwjhk22 2026-07-02 07:47:02+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:19:43+00:00| seen|...

CVE-2026-13760

creationtimestamp| type| source ---|---|--- 2026-07-01 20:46:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmf66l7bz2a 2026-07-02 18:59:47+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mpopoqvg6v22...

GHSA-HX4V-CXPF-VH8M Rancher Fleet has SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml

Impact A vulnerability has been identified in Fleet when the helmRepoURLRegex field isn't set on a GitRepo resource. Fleet's bundle reader forwards Helm authentication credentials BasicAuth to any URL specified in the helm.repo field of a fleet.yaml file. An attacker with git push access to a...

CVE-2026-55661 TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes

Tina is a headless content management system. In versions prior to @tinacms/mdx 2.1.7 and tinacms 3.9.3, rich-text parsing and the default link/image renderers did not sanitize the url field on Slate link/image nodes. Content containing javascript: or data:text/html URLs — including case-variant,...

CVE-2026-55661

CVE-2026-55661 affects TinaCMS rich-text rendering (Slate JSON) where the url field on Slate link/image nodes was not sanitized, allowing stored XSS via dangerous URL schemes such as javascript: or data:text/html. Affected versions include tinacms/mdx <2.1.7 and tinacms =2.1.7 and tinacms >...

CVE-2026-55661 TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes

Tina is a headless content management system. In versions prior to @tinacms/mdx 2.1.7 and tinacms 3.9.3, rich-text parsing and the default link/image renderers did not sanitize the url field on Slate link/image nodes. Content containing javascript: or data:text/html URLs — including case-variant,...

CVE-2026-13870

creationtimestamp| type| source ---|---|--- 2026-07-01 20:44:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmf2a2fkj2d 2026-07-02 07:21:41+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702...

CVE-2026-13889

creationtimestamp| type| source ---|---|--- 2026-07-01 20:43:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmeymz4662i 2026-07-02 07:22:31+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702...

CVE-2026-13885

creationtimestamp| type| source ---|---|--- 2026-07-01 20:40:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmetsdtxb2d 2026-07-02 07:22:22+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 18:50:59+00:00| seen|...

CVE-2026-49857

creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:16+00:00| published-proof-of-concept| https://github.com/ymw0407/auth-fetch-mcp/security/advisories/GHSA-pvrj-8cg3-j5f8...

CVE-2026-13884

creationtimestamp| type| source ---|---|--- 2026-07-01 20:09:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmd4ooo6k2q 2026-07-02 07:22:20+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:17:51+00:00| seen|...

CVE-2026-55577

creationtimestamp| type| source ---|---|--- 2026-07-01 20:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmcy6rdbd27 2026-07-02 10:27:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnt3c4ngk2r 2026-07-02 11:53:58+00:00| seen|...

CVE-2026-55628

creationtimestamp| type| source ---|---|--- 2026-07-01 20:01:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmcnwywan2v 2026-07-02 10:28:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnt45sf6m2r...

CVE-2026-13813

creationtimestamp| type| source ---|---|--- 2026-07-01 19:59:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmck23pwb2o 2026-07-01 20:56:22+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpmfqclbau2p 2026-07-02 01:30:42+00:00| seen|...

CVE-2026-13812

creationtimestamp| type| source ---|---|--- 2026-07-01 19:50:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbzmsevo2t 2026-07-02 01:30:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmv27cvmp2b 2026-07-02 07:19:30+00:00| seen|...

GHSA-M492-GV72-XVXJ Kimai Password Reset Link Remains Valid After Password Change

Summary The LoginLink signature used for password reset URLs covers only the user's id — it does not include the password hash. After a user clicks a reset link and successfully changes their password, the same link remains valid for up to 2 additional uses within a 1-hour window. Anyone who...