CVE-2019-25628

creationtimestamp| type| source ---|---|--- 2026-03-24 13:05:27+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhsnb3ljx72y 2026-03-24 13:49:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhspptsrc42p...

Tuesday, March 24, 2026 Security Releases

Tuesday, March 24, 2026 Security Releases Security releases available Updates are now available for the 25.x, 24.x, 22.x, 20.x Node.js release lines for the following issues. This security release includes the following dependency updates to address public vulnerabilities: undici 6.24.1, 7.24.4 o...

CVE-2026-4306

creationtimestamp| type| source ---|---|--- 2026-03-23 23:18:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr6zmqyb72f 2026-03-23 23:18:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr6zusy542n 2026-03-24 00:54:26+00:00| seen|...

CVE-2026-33634

Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in aquasecurity/trivy-action to credential-stealing malware, and replace all 7 tags in aquasecurity/setup-trivy with malicious...

KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack

Checkmarx KICS scanner is the latest victim of a credential-stealing supply chain attack by TeamPCP. Between 12:58–16:50 UTC on March 23, 35 tags were hijacked. Learn how to audit your workflows, identify malicious activity, and secure your GitHub Actions...

CVE-2026-33352

creationtimestamp| type| source ---|---|--- 2026-03-23 14:38:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqbysilin2c 2026-03-23 15:08:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhqdodhrdd2e 2026-03-23 17:00:15+00:00| seen|...

CVE-2026-4581

creationtimestamp| type| source ---|---|--- 2026-03-23 12:55:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhq4aoamc52n 2026-03-23 13:01:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhq4lc2qmq2z 2026-04-04 07:00:14+00:00| seen|...

CVE-2026-22900

creationtimestamp| type| source ---|---|--- 2026-03-23 10:37:14+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-qnap-7 2026-03-23 14:40:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhqc3gk4px2k...

CVE-2019-25615

creationtimestamp| type| source ---|---|--- 2026-03-22 14:38:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhnrj4xfdw2n...

GHSA-69FQ-XP46-6X23

creationtimestamp| type| source ---|---|--- 2026-03-22 00:39:26+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3mhmcnah4ja2t 2026-03-22 01:01:00+00:00| seen| https://bsky.app/profile/hnbot.gsuscs.xyz/post/3mhmdttccr22u 2026-03-22 13:18:38+00:00| seen|...

CVE-2026-4261

creationtimestamp| type| source ---|---|--- 2026-03-21 06:00:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116265637003356030 2026-03-21 06:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhke4iyr2y2c 2026-03-21 06:29:31+00:00| seen|...

CVE-2026-4494

creationtimestamp| type| source ---|---|--- 2026-03-20 22:13:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjk23fg7k2u...

Malicious code in efghr-honeybee-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e77e2d0088390e5dc421f70a65ade331bfbf554afcc9cc42362098d0ed130692 During installation, package attempts to modify LLM configuration files to provide a backdoor instruction for further control over an AI agent. --- Category:...

CVE-2026-32710

creationtimestamp| type| source ---|---|--- 2026-03-20 20:20:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjdpvfhp62c 2026-03-20 21:47:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjilfyatm2o 2026-03-25 14:57:06+00:00| seen|...

CVE-2026-33480

creationtimestamp| type| source ---|---|--- 2026-03-20 14:51:26+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-p3gr-g84w-g8hh 2026-03-20 14:51:26+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-p3gr-g84w-g8hh...

CVE-2026-33331

creationtimestamp| type| source ---|---|--- 2026-03-20 00:13:40+00:00| published-proof-of-concept| https://github.com/middleapi/orpc/security/advisories/GHSA-7f6v-3gx7-27q8 2026-03-24 19:16:28+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33331 2026-04-0...

CVE-2026-23049

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260408 2026-05-10 18:00:00+00:00| seen|...

CVE-2026-23113

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-06-01 18:00:00+00:00| seen|...

CVE-2026-23120

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260408 2026-05-05 18:00:00+00:00| seen|...

CVE-2026-23019

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...