GHSA-MHMX-MJV6-W337 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-7262 vulnerabilities

Vulnerabilities for packages: php...

CVE-2025-14179 vulnerabilities

Vulnerabilities for packages: php...

CVE-2026-6735 vulnerabilities

Vulnerabilities for packages: php...

CVE-2026-7568 vulnerabilities

Vulnerabilities for packages: php...

freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. The StreamEnsureCapacity function can create an endless blocking loop, leading to a Denial of Service DoS. This vulnerability can be exploited on 32-bit systems where the available physical memory is greater than o...

GHSA-M6XR-FVFG-5G64 vulnerabilities

Vulnerabilities for packages: vale...

GHSA-M5J3-4634-C2VQ vulnerabilities

Vulnerabilities for packages: vale...

CVE-2026-46377 vulnerabilities

Vulnerabilities for packages: vale...

GHSA-J989-FGGP-QGP5 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-8328 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-7261 vulnerabilities

Vulnerabilities for packages: php...

CVE-2026-7259 vulnerabilities

Vulnerabilities for packages: php...

CVE-2026-7258 vulnerabilities

Vulnerabilities for packages: php...

CVE-2026-6735 vulnerabilities

Vulnerabilities for packages: php...

CVE-2026-6722 vulnerabilities

Vulnerabilities for packages: php...

CVE-2026-3592

BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0...

Malicious code in @limebike/supreme-date-pickers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c82e94fac384ea6891e5aea99635ab429663e321502acbbc9eaaf81864e0d5e On npm install, both preinstall and postinstall hooks execute index.js, which collects the installer's hostname, all non-internal network interface I...

Agent AI is Coming. Are You Ready?

New Industry Data Just Released Suggests Not. On May 19th, 2026, Orchid Security released the results of our Identity Gap: Snapshot 2026. Among the findings, "identity dark matter" the unseen, unmanaged elements of identity now overshadows the visible elements 57% vs. 43%. And it couldn't have...

CVE-2026-22314

Improper Control of Generation of Code 'Code Injection' vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables code execution on other users' systems. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component:...