CVE-2026-1727

creationtimestamp| type| source ---|---|--- 2026-02-07 12:30:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116029353676261799 2026-02-07 12:30:36+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mebgdbxnwv22...

CVE-2026-1731

creationtimestamp| type| source ---|---|--- 2026-02-07 11:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mebbcbu3zb26 2026-02-07 11:00:58+00:00| seen| https://infosec.exchange/users/offseq/statuses/116028999623507500 2026-02-08 15:01:24+00:00| seen|...

CVE-2026-25763

creationtimestamp| type| source ---|---|--- 2026-02-07 09:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116028645772242625 2026-02-07 09:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meb4bemilo2h 2026-08-15 11:00:04+00:00| published-proof-of-concept|...

CVE-2026-25791

creationtimestamp| type| source ---|---|--- 2026-02-06 22:41:59+00:00| published-proof-of-concept| https://github.com/BishopFox/sliver/security/advisories/GHSA-wxrw-gvg8-fqjp 2026-02-09 21:20:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meheu7qmj72g 2026-02-09...

CVE-2026-25580 Pydantic AI Affected by Server-Side Request Forgery (SSRF) in URL Download Handling

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery SSRF vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources,...

CVE-2026-25580 Pydantic AI Affected by Server-Side Request Forgery (SSRF) in URL Download Handling

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery SSRF vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources,...

CVE-2026-24926

creationtimestamp| type| source ---|---|--- 2026-02-06 08:47:46+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116022814553754757 2026-02-06 09:17:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me6l34eepx27...

pydantic-ai code issues and vulnerabilities

Pydantic-ai is a generative AI framework developed by Pydantic for building production-grade applications and workflows. Versions of pydantic-ai prior to 1.56.0 contained code vulnerabilities. These vulnerabilities stemmed from a server-side request forgeing vulnerability in the URL download...

CVE-2026-20979

creationtimestamp| type| source ---|---|--- 2026-02-05 23:19:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me5jnsgqra2m 2026-02-05 23:20:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me5joqifel2v...

CVE-2026-20983

creationtimestamp| type| source ---|---|--- 2026-02-05 23:19:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me5jnlswh62h 2026-02-05 23:19:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me5jokezgc23...

CVE-2026-1251

creationtimestamp| type| source ---|---|--- 2026-02-05 00:42:39+00:00| seen| https://bsky.app/profile/opsmatters.com/post/3me35tkya5s22 2026-02-05 00:42:40+00:00| seen| https://bsky.app/profile/potato.software/post/3me35tlikqn2f 2026-02-05 08:33:28+00:00| seen|...

Google Go Code Execution Vulnerability (CNVD-2026-10650)

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google. A code execution vulnerability exists in Google Go due to an insecure construction of external VCS commands when handling untrusted module sources or malicious version strings in...

CVE-2025-13375

creationtimestamp| type| source ---|---|--- 2026-02-04 21:16:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2sdnvpj725 2026-02-04 21:18:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2sfmshoo2x 2026-02-05 06:55:37+00:00| seen|...

CVE-2025-63624

creationtimestamp| type| source ---|---|--- 2026-02-04 21:15:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2sachkv62h 2026-02-04 21:15:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2sba3niq2g...

CVE-2026-20987

creationtimestamp| type| source ---|---|--- 2026-02-04 09:16:53+00:00| seen| Telegram/XdHYZh0J7WcTlVKxiglshK6ayFniZdPMWChJvlhd1IMv6c 2026-02-04 09:17:03+00:00| seen| Telegram/AJJNsvmkwmZ-BaEozEan6esCkIRlwWrgPq4ibjXsKQ5cofg...

CVE-2025-10878

creationtimestamp| type| source ---|---|--- 2026-02-03 20:20:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy6qnolkf2o 2026-02-03 20:21:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy6qvto2j2v...

CVE-2026-24149

creationtimestamp| type| source ---|---|--- 2026-02-03 20:20:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy6q7myap27 2026-02-03 20:21:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy6rl63zs2g 2026-02-04 05:00:00+00:00| seen|...

CVE-2026-1285

creationtimestamp| type| source ---|---|--- 2026-02-03 15:53:03+00:00| seen| https://seclists.org/oss-sec/2026/q1/141 2026-02-03 17:16:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdxugave7y2b 2026-02-03 17:23:21+00:00| seen|...

openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand

A flaw was found in OpenSSH where control characters in usernames were not properly validated when sourced from untrusted inputs like the command line or configuration expansion. If a ProxyCommand is used, these control characters could modify command behavior, potentially leading to code executi...

urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

A flaw was found in urllib3. When processing HTTP redirect responses during data streaming, the library automatically reads and decompresses the full response body without enforcing configured size limits. A malicious server can exploit this by serving an excessively compressed response, bypassin...