CVE-2026-13221

creationtimestamp| type| source ---|---|--- 2026-07-13 17:43:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkakeohr427 2026-07-13 18:30:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqkd626fd62t 2026-07-14 14:44:05+00:00| seen|...

PYSEC-2026-2575 LangGraph SDK has unsafe URL path construction

Summary langgraph-sdk constructs HTTP request paths for resource operations by interpolating caller-supplied identifier values into URL templates. Without sanitization of those values, identifiers that contain characters with special meaning in URL paths could cause the resulting request to addre...

PYSEC-2026-3435 python-zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood

Impact AsyncListener.handlequeryordefer retained every truncated TC-bit incoming query in self.deferredaddr and armed a per-addr timer in self.timersaddr that flushed the reassembled query within 500 ms RFC 6762 §18.5. Neither the per-addr list nor the number of distinct addr keys was capped, and...

Open WebUI has Unauthorized File and Knowledge Base Content Access via RAG Vector Search

Unauthorized File and Knowledge Base Content Access via RAG Vector Search Affected ComponentRAG source resolution in chat completion pipeline:- backend/openwebui/retrieval/utils.py lines 963-965, 1063-1068, 1126-1131 in getsourcesfromitems Affected VersionsCurrent main branch commit 6fdd19bf1 and...

PraisonAI Has Arbitrary File Write (Zip Slip) in Templates Extraction

The PraisonAI templates installation feature is vulnerable to a "Zip Slip" Arbitrary File Write attack. When downloading and extracting template archives from external sources e.g., GitHub, the application uses Python's zipfile.extractall without verifying if the files within the archive resolve...

dbt-common's commonprefix() doesn't protect against path traversal

ImpactWhat kind of vulnerability is it? Who is impacted?A path traversal vulnerability exists in dbt-common's safeextract function used when extracting tarball archives. The function uses os.path.commonprefix to validate that extracted files remain within the intended destination directory...

PYSEC-2026-2440 dbt-common's commonprefix() doesn't protect against path traversal

Impact What kind of vulnerability is it? Who is impacted? A path traversal vulnerability exists in dbt-common's safeextract function used when extracting tarball archives. The function uses os.path.commonprefix to validate that extracted files remain within the intended destination directory...

CVE-2026-61498

creationtimestamp| type| source ---|---|--- 2026-07-13 14:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjuqh3mjq2b 2026-07-13 14:48:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjwr43qom2q 2026-07-13 17:58:09+00:00| seen|...

CERTFR-2026-ACT-030

creationtimestamp| type| source ---|---|--- 2026-07-13 13:36:35+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mqjsqx45tu2v 2026-07-13 13:36:38+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116912933713310926 2026-07-13 14:00:27+00:00| seen|...

CVE-2026-6541

creationtimestamp| type| source ---|---|--- 2026-07-13 13:19:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjrrssiwv27 2026-07-13 13:34:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjsnlua352g 2026-07-13 18:19:01+00:00| seen|...

CVE-2026-57411

creationtimestamp| type| source ---|---|--- 2026-07-13 12:10:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqjnw7ua252u 2026-07-13 12:10:21+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116912594644386383...

CVE-2026-59523

creationtimestamp| type| source ---|---|--- 2026-07-13 11:57:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjn72rpzm2d 2026-07-13 12:45:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjpwgtxo52e 2026-07-14 01:51:23+00:00| seen|...

CVE-2026-57719

creationtimestamp| type| source ---|---|--- 2026-07-13 11:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjl4ur7zb2b 2026-07-13 11:23:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjlchorxn24 2026-07-13 11:29:15+00:00| seen|...

CVE-2026-59518

creationtimestamp| type| source ---|---|--- 2026-07-13 11:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjkc6f45w2l 2026-07-13 11:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjlorfkkl2w 2026-07-13 11:55:15+00:00| seen|...

CVE-2026-57813

creationtimestamp| type| source ---|---|--- 2026-07-13 10:45:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjj6fxunm2x 2026-07-13 11:28:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjll6gxdw2v 2026-07-13 11:54:34+00:00| seen|...

CVE-2026-15574

creationtimestamp| type| source ---|---|--- 2026-07-13 09:50:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjg4qea2f2i 2026-07-13 09:50:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjg4wv44l2k 2026-07-14 01:10:43+00:00| seen|...

CVE-2026-15546

creationtimestamp| type| source ---|---|--- 2026-07-13 09:45:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjfuhyoop2s 2026-07-13 10:17:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjhn4vufb26 2026-07-14 01:14:35+00:00| seen|...

CVE-2026-9597

creationtimestamp| type| source ---|---|--- 2026-07-13 09:40:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjfkxgnoi2e 2026-07-13 09:44:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjfs5lmyt25 2026-07-13 18:57:24+00:00| seen|...

CVE-2026-57829

creationtimestamp| type| source ---|---|--- 2026-07-13 08:27:08+00:00| seen| https://bsky.app/profile/suriq.io/post/3mqjbhlhal325 2026-07-13 08:30:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjboanlg72i 2026-07-13 09:55:28+00:00| seen|...

CVE-2026-12582

creationtimestamp| type| source ---|---|--- 2026-07-13 07:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116911494012539173 2026-07-13 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqj6cbiqal2d 2026-07-13 07:38:06+00:00| seen|...