EUVD-2026-42323

setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision NFC/NFD on macOS APFS/HFS+...

CVE-2026-15793

creationtimestamp| type| source ---|---|--- 2026-07-21 19:00:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6im6rly627...

GHSA-XCMW-GRXF-WJHJ

creationtimestamp| type| source ---|---|--- 2026-07-21 19:00:30+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mr6ilj3l562e...

CVE-2026-16439

creationtimestamp| type| source ---|---|--- 2026-07-21 18:51:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6i3ko2bf24...

CVE-2026-47409

creationtimestamp| type| source ---|---|--- 2026-07-21 18:44:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6houl2rk2q...

CVE-2026-47406

creationtimestamp| type| source ---|---|--- 2026-07-21 18:41:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6hjik73j2g...

CVE-2026-15792

creationtimestamp| type| source ---|---|--- 2026-07-21 18:38:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6hem5ttx2q...

CVE-2026-16451

creationtimestamp| type| source ---|---|--- 2026-07-21 18:36:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6ha4qrux24...

CVE-2026-24232

creationtimestamp| type| source ---|---|--- 2026-07-21 18:27:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gr6jdha2b...

CVE-2026-44907

creationtimestamp| type| source ---|---|--- 2026-07-21 18:26:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gnyyd4e2j...

CVE-2026-15829

creationtimestamp| type| source ---|---|--- 2026-07-21 18:24:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gkzbrpy2b...

CVE-2026-15789

creationtimestamp| type| source ---|---|--- 2026-07-21 18:22:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gi6jkll2g...

CVE-2026-15791

creationtimestamp| type| source ---|---|--- 2026-07-21 18:21:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gfi7b5t2i...

CVE-2026-16493

A flaw was found in ansible-core. The extractcollectionfromgit function in ansible-core's concreteartifactmanager.py constructs git clone commands without a '--' end-of-options separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted...

akto v2.13.11

Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...

Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection through gitSourceHandler.checkoutAsBundle in source/git/bundle.go and getDefaultBranch in source/git/source.go. An attacker can trigger crafted host-side git command arguments by supplying a malicious Git...

CVE-2026-47410

creationtimestamp| type| source ---|---|--- 2026-07-21 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6djsm3uo2q 2026-07-21 19:10:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6j63qcax23...

CVE-2026-16493

The CVE-2026-16493 entry describes a command-injection vulnerability in ansible-core where _extract_collection_from_git() builds git clone commands without a proper end-of-options separator, allowing an attacker to craft a collection source URI that injects payloads during ansible-galaxy collecti...

Malicious code in pdf-converter-pro (PyPI)

Source: amazon-inspector 0b3a5f6d1d39c20feca11d0129f0efa21bdf564586045555b756cc25bce73efc Package is advertised as a PDF converter but contains no PDF generation code. Its sole public method TXTtoPDFConverter.createpdftxtpath, pdfpath is gated on the literal arguments 'file.txt' and 'file.pdf';...

Malicious code in music-source-separation (PyPI)

Source: kam193 a4aa4c5d893735fb71d4983056b6d254f087a4f5c82df6976e2efdab41f0c9f2 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the username to the package author. There is no other purpose...