CVE-2026-40069

BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.1.0 to before 0.8.2, BSV::Network::ARC's failure detection only recognises REJECTED and DOUBLESPENDATTEMPTED. ARC responses with txStatus values of INVALID, MALFORMED, MINEDINSTALEBLOCK, or any ORPHAN-containing extraInfo / txStatus are...

GHSA-JCC6-F9V6-F7JW

creationtimestamp| type| source ---|---|--- 2026-04-09 17:01:15+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mj3bvhmgr32w 2026-04-09 17:23:27+00:00| seen| Telegram/UYy9QXiDWOzFY7CBVA8MS0Xr-No70LVttPhqPBLktKhMGyQ 2026-04-18 04:37:07+00:00| seen|...

CVE-2026-39398

The affected product and advisory are not public...

GHSA-Q96J-3FMM-7FV4

creationtimestamp| type| source ---|---|--- 2026-04-09 11:16:38+00:00| seen| Telegram/nE1gVyn8jRxbZ-OhSUewb4fvVZDT-qjlGTvhk8YiMctdMk...

GHSA-FM2X-C5QW-4H6F

creationtimestamp| type| source ---|---|--- 2026-04-09 11:16:38+00:00| seen| Telegram/nE1gVyn8jRxbZ-OhSUewb4fvVZDT-qjlGTvhk8YiMctdMk...

CVE-2026-25462

creationtimestamp| type| source ---|---|--- 2026-04-09 00:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mizkj6bdel2o...

PT-2026-31671

Name of the Vulnerable Software and Affected Versions BSV Ruby SDK versions 0.1.0 through 0.8.1 Description The BSV Ruby SDK's ARC broadcaster incorrectly treats certain failure statuses from the ARC endpoint as successful broadcasts. Specifically, responses with txStatus values of INVALID,...

Linux Distros Unpatched Vulnerability : CVE-2026-5871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

Erlang/OTP 27.x < 27.3.4.10 / 28.x < 28.4.2 OCSP Certificate Validation Bypass (CVE-2026-32144)

The version of Erlang/OTP installed on the remote host is 27.x prior to 27.3.4.10 or 28.x prior to 28.4.2. It is, therefore, affected by a certificate validation bypass vulnerability: - Improper certificate validation in the publickey application's OCSP response validation allows an attacker who...

bsv-sdk ARC broadcaster treats INVALID/MALFORMED/ORPHAN responses as successful broadcasts

ARC broadcaster treats failure statuses as successful broadcasts Summary BSV::Network::ARC's failure detection only recognises REJECTED and DOUBLESPENDATTEMPTED. ARC responses with txStatus values of INVALID, MALFORMED, MINEDINSTALEBLOCK, or any ORPHAN-containing extraInfo / txStatus are silently...

CVE-2026-34392

creationtimestamp| type| source ---|---|--- 2026-04-08 23:33:06+00:00| seen| Telegram/nb1jq11aD1wlJ1YglJrLy9zN5IvfOUCCPtd3YJ7-KFKCMzY 2026-04-09 08:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2douz4vn2s 2026-04-18 07:37:08+00:00| seen|...

Improper Authentication

Overview org.apache.tomcat:tomcat-coyote is a Tomcat Connectors and HTTP parser. Affected versions of this package are vulnerable to Improper Authentication in processOCSPRequest, which is part of the the CLIENTCERT authentication process. An attacker can trigger a soft-fail of OCSP checks when...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication in processOCSPRequest, which is part of the the CLIENTCERT authentication process. In some "edge cases", an attacker can trigger a soft-fail of OCSP checks when soft-fail is disabled. Remediation Upgrade...

Improper Authentication

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Improper Authentication in processOCSPRequest, which is part of the the CLIENTCERT authentication process. An attacker can trigger a soft-fail of OCSP checks whe...

Improper Authentication

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Improper Authentication in processOCSPRequest, which is part of the the CLIENTCERT authentication process. In some "edge cases", an attacker can trigger a...

CVE-2025-50669

creationtimestamp| type| source ---|---|--- 2026-04-08 19:30:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116370742055082948...

Deserialization of Untrusted Data

Overview praisonai is a PraisonAI TypeScript AI Agents Framework - Node.js, npm, and Javascript AI Agents Framework Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the YAML deserialization in the loadAgentFromFile function. An attacker can execute...

CVE-2025-50668

creationtimestamp| type| source ---|---|--- 2026-04-08 19:03:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116370636293391705...

CVE-2026-5858

creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-09 02:28:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116372387571865499 2026-04-09 17:03:07+00:00| seen|...

CVE-2026-3396

creationtimestamp| type| source ---|---|--- 2026-04-08 13:16:11+00:00| seen| Telegram/w2JXUvOVbxOFgIv0sLZ9cDyiJ5at0tkdnYt2mHRiDRLUrQ 2026-04-08 14:30:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyiymuxss2i 2026-04-09 11:00:03+00:00| seen|...