CVE-2026-53551

creationtimestamp| type| source ---|---|--- 2026-07-31 21:31:45+00:00| seen| https://gist.github.com/alon710/0f09a6f6c7f9c253322faa348755ead8 2026-07-31 22:35:11+00:00| published-proof-of-concept| https://github.com/free5gc/free5gc/security/advisories/GHSA-qj55-47fp-p62j 2026-08-01 00:15:08+00:00...

GHSA-QJ55-47FP-P62J

creationtimestamp| type| source ---|---|--- 2026-07-31 21:31:45+00:00| seen| https://gist.github.com/alon710/0f09a6f6c7f9c253322faa348755ead8...

CVE-2026-62999

creationtimestamp| type| source ---|---|--- 2026-07-31 21:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxtwxnwbd2l 2026-08-01 00:15:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-62999...

CVE-2026-64815

creationtimestamp| type| source ---|---|--- 2026-07-31 20:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrxsnhkist22...

GHSA-3WHF-VGF2-9W6G

creationtimestamp| type| source ---|---|--- 2026-07-31 20:31:22+00:00| seen| https://gist.github.com/alon710/124f7bf887e5079fb15a66958a9543ef...

CVE-2026-15976

creationtimestamp| type| source ---|---|--- 2026-07-31 20:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxrap7cbf2z 2026-08-01 20:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bevoq4c2f...

CVE-2026-15971

creationtimestamp| type| source ---|---|--- 2026-07-31 20:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxr55g6ps2u 2026-08-01 20:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2beuzq2c2z...

CVE-2025-69934

creationtimestamp| type| source ---|---|--- 2026-07-31 20:06:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxqvzbqfr2u...

CVE-2025-69933

creationtimestamp| type| source ---|---|--- 2026-07-31 20:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxqvxseu72l...

CVE-2025-69936

creationtimestamp| type| source ---|---|--- 2026-07-31 20:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxqsew44y2m...

EUVD-2026-51624

Savon is a Ruby SOAP client. From 0.9.8 until 2.17.2, Savon::Model .alloperations interpolates attacker-controlled WSDL operation names into Ruby source passed to moduleeval, allowing Ruby code execution in the application process. This issue is fixed in version 2.17.2...

CVE-2026-53510 Savon::Model evaluates WSDL operation names as Ruby source

Savon is a Ruby SOAP client. From 0.9.8 until 2.17.2, Savon::Model .alloperations interpolates attacker-controlled WSDL operation names into Ruby source passed to moduleeval, allowing Ruby code execution in the application process. This issue is fixed in version 2.17.2...

CVE-2026-53504

creationtimestamp| type| source ---|---|--- 2026-07-31 19:31:28+00:00| seen| https://gist.github.com/alon710/de1c5b8263f3d3a5d1101a3c2a0269ab 2026-07-31 20:35:27+00:00| published-proof-of-concept| https://github.com/thumbor/thumbor/security/advisories/GHSA-5vjc-7cxw-4w6j...

CVE-2026-35847

creationtimestamp| type| source ---|---|--- 2026-07-31 19:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxnh4gb4m2a...

CVE-2026-53502

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, fileloader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILELOADERROOTPATH through watermark or frame filter input. This issue is fixed in 7.8.0...

CVE-2026-15969

creationtimestamp| type| source ---|---|--- 2026-07-31 19:02:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxndlbvkx2h 2026-08-05 14:27:15+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3msdqcbbsp726 2026-08-06 03:18:46+00:00| seen|...

CVE-2026-53505

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:proportion filter does not enforce an upper bound on and runs in the post-transform phase. An attacker can trigger extremely large resizes CPU/memory exhaustion and cause denial of service. This issu...

CVE-2025-65336

creationtimestamp| type| source ---|---|--- 2026-07-31 18:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxn4f3i2d23...

CVE-2026-53504

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the convolution filter regular expression performs exponential backtracking on crafted repeated numeric input, allowing a URL request to exhaust processing time. This issue is fixed in 7.8.0...

CVE-2026-53503

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:convolution, , filter passes the user-controlled value to a C extension thumbor/ext/filters/convolution.c where it is used as a divisor for % and / without validating columns 0. When columns=0, the C...