CVE-2026-0238

creationtimestamp| type| source ---|---|--- 2026-07-13 17:50:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkaxfclq42w 2026-07-16 08:04:05+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrl5x6vl2y...

CVE-2026-13243

creationtimestamp| type| source ---|---|--- 2026-07-13 17:38:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkaasnkwj2f...

CVE-2026-13241

creationtimestamp| type| source ---|---|--- 2026-07-13 17:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkaarczuq2t...

CVE-2026-57432

creationtimestamp| type| source ---|---|--- 2026-07-13 17:37:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqka7mplwe26 2026-07-13 18:35:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqkdgymh2224...

CVE-2026-13240

creationtimestamp| type| source ---|---|--- 2026-07-13 17:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqka5a775724...

CVE-2026-13238

creationtimestamp| type| source ---|---|--- 2026-07-13 17:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7znix7l2w...

CVE-2026-13237

creationtimestamp| type| source ---|---|--- 2026-07-13 17:34:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7zm334g2v...

CVE-2026-61692

creationtimestamp| type| source ---|---|--- 2026-07-13 17:32:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqk7woclfu2l...

CVE-2026-13236

creationtimestamp| type| source ---|---|--- 2026-07-13 17:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7w2sdkl2b 2026-07-21 04:45:08+00:00| seen| https://jvn.jp/en/jp/JVN20592637...

CVE-2026-13235

creationtimestamp| type| source ---|---|--- 2026-07-13 17:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7vzdsnp24...

CVE-2026-13233

creationtimestamp| type| source ---|---|--- 2026-07-13 17:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7sj363e2h 2026-07-22 17:00:05+00:00| seen| Telegram/q3tIaYx4agFM3da1rV7jtAQTpWs9uwXUcQ2UZM8hUpw4XQ 2026-07-22 17:00:05+00:00| seen|...

CVE-2026-13232

creationtimestamp| type| source ---|---|--- 2026-07-13 17:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7shm54u22...

CVE-2026-12535

creationtimestamp| type| source ---|---|--- 2026-07-13 17:26:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7lekcft2w...

CVE-2026-11909

creationtimestamp| type| source ---|---|--- 2026-07-13 17:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7lcy44r2f...

GHSA-RWCV-WHM8-FMXM

creationtimestamp| type| source ---|---|--- 2026-07-13 17:11:49+00:00| seen| https://gist.github.com/alon710/1cf437e22a892172012205a9b0e24d57...

CVE-2026-57799

creationtimestamp| type| source ---|---|--- 2026-07-13 16:00:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk2rka7sj26 2026-07-16 08:02:01+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrhgfzm22y...

PYSEC-2026-2543 kas's late signature validation may allow unnoticed repository manipulations

Impact So far, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the control of an attacker under very specific conditions. First of all, the attacker mus...

PYSEC-2026-2470 ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override

Summary fides.js is the script that renders Fides's consent banner on customer websites. It lets the embedding page override the banner's description text at runtime via a URL query parameter, a JavaScript global, or a cookie. On sites that have opted into HTML-formatted descriptions, the...

CVE-2026-59216

creationtimestamp| type| source ---|---|--- 2026-07-13 15:09:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjxwa6pxg2c 2026-07-16 08:01:21+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrgb6tvx2g 2026-07-24 18:35:08+00:00| published-proof-of-concept|...

PYSEC-2026-2436 Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations

Summary The DuckDB, Snowflake, BigQuery, and DeltaLake I/O managers constructed SQL WHERE clauses by interpolating dynamic partition key values into queries without escaping. A user with the Add Dynamic Partitions permission could create a partition key that injects arbitrary SQL, which would...