securitybot

Securitybot ¡Alertas distribuidas para las masas! Securitybot es una implementación de código abierto de un chatbot de alertas distribuidas, como se describe en la publicación del blog de Ryan Huber. Las alertas distribuidas mejoran la eficiencia de monitoreo de tu equipo de seguridad y pueden...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +92 more potentially affected by CVE-2026-107281 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107281 Source advisory: MEND:CVE-2026-107281...

agilicus (>=1.5.1, <=1.6.1), akeyra (>=0.0.1, <=0.1.2) +30 more potentially affected by CVE-2026-102268 via pyjwt (1.5.3)

pyjwt PYPI version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - agilicus =1.5.1, =0.0.1, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.7.0, =2.1.0, =1.10.0.1b0, =0.4.8,...

agilicus (>=1.5.1, <=1.6.1), akeyra (>=0.0.1, <=0.1.2) +30 more potentially affected by CVE-2026-101917 via pyjwt (1.5.3)

pyjwt PYPI version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - agilicus =1.5.1, =0.0.1, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.7.0, =2.1.0, =1.10.0.1b0, =0.4.8,...

PYSEC-2026-4130 OpenCVE: Server-Side Request Forgery (SSRF) in notifications

Impact OpenCVE contains a Server-Side Request Forgery SSRF vulnerability in the notification testing functionality for both Webhook and Slack integrations. An authenticated user with permission to configure notification channels can trigger test requests to arbitrary HTTPS endpoints. Insufficient...

OpenCVE: Server-Side Request Forgery (SSRF) in notifications

ImpactOpenCVE contains a Server-Side Request Forgery SSRF vulnerability in the notification testing functionality for both Webhook and Slack integrations.An authenticated user with permission to configure notification channels can trigger test requests to arbitrary HTTPS endpoints. Insufficient...

PT-2026-105879

Impact OpenCVE contains a Server-Side Request Forgery SSRF vulnerability in the notification testing functionality for both Webhook and Slack integrations. An authenticated user with permission to configure notification channels can trigger test requests to arbitrary HTTPS endpoints. Insufficient...

agilicus (>=1.5.1, <=1.6.1), akeyra (>=0.0.1, <=0.1.2) +30 more potentially affected by CVE-2026-102270 via pyjwt (1.5.3)

pyjwt PYPI version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - agilicus =1.5.1, =0.0.1, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.7.0, =2.1.0, =1.10.0.1b0, =0.4.8,...

agilicus (>=1.5.1, <=1.6.1), akeyra (>=0.0.1, <=0.1.2) +30 more potentially affected by CVE-2026-102269 via pyjwt (1.5.3)

pyjwt PYPI version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - agilicus =1.5.1, =0.0.1, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.7.0, =2.1.0, =1.10.0.1b0, =0.4.8,...

CLEANSTART-2026-ZK17836 Slack Nebula before 1

Security vulnerability affects the step-ca package. Slack Nebula before 1...

CVE-2026-101049

Heym before 0.0.53 fails to verify Slack request signatures when trigger nodes lack credential IDs or have empty signing secrets. Remote unauthenticated attackers can send forged Slack events to known webhook URLs to trigger workflows with the owner's credentials...

CVE-2026-101049 Heym before 0.0.53 Slack Webhook Signature Verification Bypass

Heym before 0.0.53 fails to verify Slack request signatures when trigger nodes lack credential IDs or have empty signing secrets. Remote unauthenticated attackers can send forged Slack events to known webhook URLs to trigger workflows with the owner's credentials...

CVE-2026-101049 Heym before 0.0.53 Slack Webhook Signature Verification Bypass

Heym before 0.0.53 fails to verify Slack request signatures when trigger nodes lack credential IDs or have empty signing secrets. Remote unauthenticated attackers can send forged Slack events to known webhook URLs to trigger workflows with the owner's credentials...

EUVD-2026-87969

Heym before 0.0.53 fails to verify Slack request signatures when trigger nodes lack credential IDs or have empty signing secrets. Remote unauthenticated attackers can send forged Slack events to known webhook URLs to trigger workflows with the owner's credentials...

CVE-2026-101049

The Heym application (versions before 0.0.53 ) is vulnerable to a Slack Webhook Signature Verification Bypass . The root cause is a failure to verify signatures when trigger nodes lack credential IDs or contain empty signing secrets. This allows remote unauthenticated attackers to send forged Sla...

CVE-2026-101049 Heym before 0.0.53 Slack Webhook Signature Verification Bypass

Heym before 0.0.53 fails to verify Slack request signatures when trigger nodes lack credential IDs or have empty signing secrets. Remote unauthenticated attackers can send forged Slack events to known webhook URLs to trigger workflows with the owner's credentials...

CVE-2026-100858 heym before 0.0.109 Server-Side Request Forgery via Workflow Nodes

heym before 0.0.109 contains a server-side request forgery vulnerability in the Slack, Discord, and Crawler workflow nodes. These nodes issue HTTP requests to URLs taken from user-created credentials webhookurl / flaresolverrurl using an unguarded HTTP client, bypassing the SSRF egress guard that...

CVE-2026-100858 heym before 0.0.109 Server-Side Request Forgery via Workflow Nodes

heym before 0.0.109 contains a server-side request forgery vulnerability in the Slack, Discord, and Crawler workflow nodes. These nodes issue HTTP requests to URLs taken from user-created credentials webhookurl / flaresolverrurl using an unguarded HTTP client, bypassing the SSRF egress guard that...

CVE-2026-100858: Server-Side Request Forgery (SSRF)

heym before 0.0.109 contains a server-side request forgery vulnerability in the Slack, Discord, and Crawler workflow nodes. These nodes issue HTTP requests to URLs taken from user-created credentials webhookurl / flaresolverrurl using an unguarded HTTP client, bypassing the SSRF egress guard that...

CVE-2026-101049: Improper Authentication

Heym before 0.0.53 fails to verify Slack request signatures when trigger nodes lack credential IDs or have empty signing secrets. Remote unauthenticated attackers can send forged Slack events to known webhook URLs to trigger workflows with the owner's credentials...