GHSA-QW48-84F6-28GV Graphite Has a Pickle Deserialization Vulnerability

Impact Type of vulnerability: Insecure Deserialization via Python's pickle module. Who is impacted: Users of Graphite graph database engine versions before 0.2 who load database files from untrusted or third-party sources. An attacker could craft a malicious database file that executes arbitrary...

CERTFR-2026-ACT-022

creationtimestamp| type| source ---|---|--- 2026-05-18 11:39:08+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mm4s3dwvnz2n 2026-05-18 11:39:09+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116595382450086436...

CVE-2026-7498

creationtimestamp| type| source ---|---|--- 2026-05-18 10:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116595112473906096 2026-05-18 10:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mm4oamh4jk2y 2026-05-18 10:48:08+00:00| seen|...

CVE-2026-6495

creationtimestamp| type| source ---|---|--- 2026-05-18 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116594404656368136 2026-05-18 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mm4e6qc5hu2m 2026-05-18 09:14:09+00:00| seen|...

CVE-2026-8788 Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections

Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. The values from the setadd method were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Note that version 0.9.0 fixed a similar issue...

CVE-2026-8788 Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections

Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. The values from the setadd method were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Note that version 0.9.0 fixed a similar issue...

EUVD-2026-30739

Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. The values from the setadd method were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Note that version 0.9.0 fixed a similar issue...

CVE-2026-6473

creationtimestamp| type| source ---|---|--- 2026-05-18 06:01:20+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-postgresql-1 2026-05-18 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mm5efumaz32w 2026-05-19 18:13:50+00:00| seen|...

CVE-2026-8786

creationtimestamp| type| source ---|---|--- 2026-05-18 06:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mm475sogkr2f 2026-05-18 06:00:48+00:00| seen| https://infosec.exchange/users/offseq/statuses/116594050785807637 2026-05-18 06:27:11+00:00| seen|...

CVE-2026-8776

creationtimestamp| type| source ---|---|--- 2026-05-18 01:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mm3q346myt2v 2026-05-18 01:30:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116592989309624683 2026-05-18 03:00:46+00:00| seen|...

CVE-2026-46720

Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics...

CVE-2026-46720 Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections

Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics...

CVE-2026-46720

Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics...

CVE-2017-9313

creationtimestamp| type| source ---|---|--- 2026-05-17 15:23:15+00:00| seen| https://gist.github.com/dohyun4455/0153f5bf20c868cd82dca3e99a9e70a4 2026-05-17 15:23:17+00:00| seen| https://gist.github.com/dohyun4455/6da8ff9f0cecd699ca89b6d71654b71f 2026-05-17 15:25:44+00:00| seen|...

CVE-2026-8737

creationtimestamp| type| source ---|---|--- 2026-05-17 07:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlztpq24sr2y 2026-05-17 07:32:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116588742163874116...

CVE-2026-8733

creationtimestamp| type| source ---|---|--- 2026-05-17 06:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlzoovg7ab26 2026-05-17 06:04:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/116588388488618469 2026-05-17 08:35:48+00:00| seen|...

CVE-2026-8725

creationtimestamp| type| source ---|---|--- 2026-05-17 03:00:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116587680874193200 2026-05-17 03:01:57+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlzen4c7jy2l 2026-05-17 04:47:32+00:00| seen|...

PT-2026-41581

Name of the Vulnerable Software and Affected Versions Net::Statsd::Tiny versions prior to 0.3.8 Description Net::Statsd::Tiny for Perl allows metric injections because metric names and set values are not validated for newlines, colons, or pipes. This allows metrics generated from untrusted source...

CVE-2026-46719

Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics...

CVE-2026-46719 Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections

Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics...