CVE-2026-9253

creationtimestamp| type| source ---|---|--- 2026-07-09 11:54:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7l5x5fd325 2026-07-09 13:30:51+00:00| seen| https://infosec.exchange/users/offseq/statuses/116890261952553944 2026-07-09 13:30:53+00:00| seen|...

CVE-2026-44041

creationtimestamp| type| source ---|---|--- 2026-07-09 11:36:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq7k6qpavs26 2026-07-09 11:36:58+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mq7k7dycw32s...

BIT-AIRFLOW-2026-49296 Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}

Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/dagid — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not...

CVE-2026-44934

creationtimestamp| type| source ---|---|--- 2026-07-09 03:28:04+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mq6ov4q7ot2f 2026-07-09 03:28:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6ov5pniv27...

CVE-2026-59723

creationtimestamp| type| source ---|---|--- 2026-07-09 01:33:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6ii3a55f27 2026-07-09 04:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mq6qq2mnan2c...

CVE-2026-15133

creationtimestamp| type| source ---|---|--- 2026-07-09 00:34:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116887208284085207 2026-07-09 01:25:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6hzaaw4x27 2026-07-09 04:46:08+00:00| seen|...

CVE-2026-15129

creationtimestamp| type| source ---|---|--- 2026-07-09 00:00:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116887076049207813 2026-07-09 00:00:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq6dcbdhns2x 2026-07-09 00:20:37+00:00| seen|...

CVE-2026-60104

creationtimestamp| type| source ---|---|--- 2026-07-08 22:12:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq65arfuib24 2026-07-08 23:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq6a547swj2z 2026-07-09 16:00:46+00:00| seen|...

CVE-2026-58494

Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-link creation and renaming check directory permissions but not matching FilePerms on source and destination preopens, allowing a WASI guest with a read-only source file capability to overwrite...

UBUNTU-CVE-2026-58494

Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-link creation and renaming check directory permissions but not matching FilePerms on source and destination preopens, allowing a WASI guest with a read-only source file capability to overwrite...

CVE-2026-60102

creationtimestamp| type| source ---|---|--- 2026-07-08 17:04:53+00:00| seen| https://bsky.app/profile/hackerfantastic.bsky.social/post/3mq5m2sgh3c2w 2026-07-08 17:28:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5nehtqw22g 2026-07-09 09:44:04+00:00| seen|...

CVE-2018-20599

creationtimestamp| type| source ---|---|--- 2026-07-08 16:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq5kj5avp323 2026-07-08 16:37:08+00:00| seen| https://bsky.app/profile/potato.software/post/3mq5kj6ilvn2v...

CVE-2026-40215

A flaw was found in OpenVPN that occurs when a connection is being established or updated. A remote attacker could exploit this timing issue to crash the OpenVPN server, causing a temporary service disruption Denial of Service. In some cases, it could also allow an attacker to view fragments of t...

CVE-2026-58480

creationtimestamp| type| source ---|---|--- 2026-07-08 13:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116884598388668562 2026-07-08 13:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq5a3kmqpd2j 2026-07-08 14:12:06+00:00| seen|...

CVE-2026-12378

creationtimestamp| type| source ---|---|--- 2026-07-08 07:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116883182787896423 2026-07-08 07:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq4lxt2vde2d 2026-07-08 08:04:39+00:00| seen|...

CVE-2026-12479

A flaw was found in Keras, specifically in the model saving and loading library. This path traversal vulnerability occurs due to improper handling of user-provided layer names, which allows an attacker to craft a malicious Keras model. When this model is saved or loaded, it can escape its intende...

PYSEC-2026-1996 Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

Impact urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header e.g., gzip,...

CVE-2026-48588

creationtimestamp| type| source ---|---|--- 2026-07-07 15:02:03+00:00| seen| https://bsky.app/profile/selfhost.directory/post/3mq2uqb2zhm2c 2026-07-07 15:04:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2uvi6mb22w 2026-07-07 16:28:41+00:00| seen|...

PYSEC-2026-1253 CKAN has Cross-site Scripting vector in the Datatables view plugin

The Datatables view plugin did not properly escape record data coming from the DataStore, leading to a potential XSS vector. Impact Sites running CKAN = 2.7.0 with the datatablesview plugin activated. This is a plugin included in CKAN core, that not activated by default but it is widely used to...

PYSEC-2026-1431 Guardrails AI vulnerable to Improper Restriction of XML External Entity Reference

RAIL documents are an XML-based format invented by Guardrails AI to enforce formatting checks on LLM outputs. Guardrails users that consume RAIL documents from external sources are vulnerable to XXE, which may cause leakage of internal file data via the SYSTEM entity...