EUVD-2026-65701

Airbyte Platform resolves the workspace used for its authorization decision from a field the caller supplies. AuthorizationServerHandler copies recognised identifiers out of the raw JSON request body into X-Airbyte- headers, and AuthenticationHeaderResolver.resolveWorkspace consults...

E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands

Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead drop resolvers DDRs to deliver two previously unreported remote access trojans RATs tracked as E4del and PINHOLE. While threat actors are known to abuse legitimate services to point to additional...

PT-2026-94310

Name of the Vulnerable Software and Affected Versions vm2 versions 3.11.3 through 3.11.6 Description When the builtin: '' configuration or explicit permission is granted, the host node:sqlite module is exposed to code running in NodeVM. Although the module is wrapped with vm.readonly to prevent...

Malicious Package

Overview spotify-url-resolver is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-63421

Keystone is a content management system for Node.js. Prior to 6.5.3, the findMany resolver in packages/core/src/lib/core/queries/resolvers.ts compares the signed take argument directly with graphql.maxTake, allowing a remote unauthenticated GraphQL client to provide a negative take value whose...

CVE-2026-63421

Keystone (Node.js CMS) prior to 6.5.3 contains a graphql.maxTake bypass in the findMany resolver (packages/core/src/lib/core/queries/resolvers.ts). The resolver compares the signed take argument directly against the configured maxTake bound, so a remote unauthenticated GraphQL client can supply a...

CVE-2026-63421 Keystone: `graphql.maxTake` bypass with negative `take`

Keystone is a content management system for Node.js. Prior to 6.5.3, the findMany resolver in packages/core/src/lib/core/queries/resolvers.ts compares the signed take argument directly with graphql.maxTake, allowing a remote unauthenticated GraphQL client to provide a negative take value whose...

EUVD-2026-64134

Keystone is a content management system for Node.js. Prior to 6.5.3, the findMany resolver in packages/core/src/lib/core/queries/resolvers.ts compares the signed take argument directly with graphql.maxTake, allowing a remote unauthenticated GraphQL client to provide a negative take value whose...

CVE-2026-63421

Keystone is a content management system for Node.js. Prior to 6.5.3, the findMany resolver in packages/core/src/lib/core/queries/resolvers.ts compares the signed take argument directly with graphql.maxTake, allowing a remote unauthenticated GraphQL client to provide a negative take value whose...

CVE-2026-59318 DefaultToolCallingManager Global Resolver Fallback Allows Unadvertised Tool Dispatch via Prompt Injection

In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is dispatched. Under certain conditions, a tool that was not made available to the current request could be invoked, potentially leading to privilege...

CVE-2026-59318

CVE-2026-59318 is an Incorrect Authorization flaw in Spring AI 's tool calling support, specifically in DefaultToolCallingManager within the org.springframework.ai:spring-ai-model package. The per-request tool list is advertised to the model as a boundary but is not fully enforced at dispatch tim...

CVE-2026-59318 DefaultToolCallingManager Global Resolver Fallback Allows Unadvertised Tool Dispatch via Prompt Injection

In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is dispatched. Under certain conditions, a tool that was not made available to the current request could be invoked, potentially leading to privilege...

CVE-2026-59318 DefaultToolCallingManager Global Resolver Fallback Allows Unadvertised Tool Dispatch via Prompt Injection

In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is dispatched. Under certain conditions, a tool that was not made available to the current request could be invoked, potentially leading to privilege...

CVE-2026-66374

A flaw was found in Knot Resolver. This vulnerability, a heap-based buffer overflow, exists in the DNS-over-QUIC DoQ receive path. A remote attacker could exploit this flaw to achieve remote code execution, allowing them to run arbitrary commands on the affected system...

CVE-2026-39155

A flaw was found in Knot DNS. The mod-onlinesign component incorrectly computes the next NSEC Next Secure owner name. This can lead to an overly broad authenticated denial interval, allowing DNS Domain Name System resolvers that use aggressive negative caching to incorrectly generate negative...

CVE-2026-63421: Improper Input Validation

Keystone is a content management system for Node.js. Prior to 6.5.3, the findMany resolver in packages/core/src/lib/core/queries/resolvers.ts compares the signed take argument directly with graphql.maxTake, allowing a remote unauthenticated GraphQL client to provide a negative take value whose...

PT-2026-79448

Name of the Vulnerable Software and Affected Versions Keystone versions prior to 6.5.3 Description The findMany resolver in packages/core/src/lib/core/queries/resolvers.ts compares the signed take argument directly with graphql.maxTake. This allows a remote unauthenticated GraphQL client to provi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bind (UTSA-2026-102699)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102699 advisory. The BIND resolver accepts validly-signed NSEC records where the Next Domain Name field points outside the signer's zone. This issue affects BIND 9 versions 9.11.0...

numa v0.23.0

Numa DNS you own. Everywhere you go. — numa.rs A portable DNS resolver in a single binary. Block ads on any network, name your local services frontend.numa, override any hostname with auto-revert, and seal every outbound query with ODoH RFC 9230 so no single party sees both who you are and what y...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...