CVE-2026-53147

creationtimestamp| type| source ---|---|--- 2026-06-28 18:28:12+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpem2lbzro2u 2026-06-28 18:28:13+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpem2mjzdc2g 2026-06-28 18:28:13+00:00| seen|...

CVE-2026-12415

creationtimestamp| type| source ---|---|--- 2026-06-27 06:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mparsjsyrw2u 2026-06-27 06:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpassotsjd2s 2026-06-27 06:25:12+00:00| seen|...

CVE-2026-11356

creationtimestamp| type| source ---|---|--- 2026-06-27 05:50:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mparafvfd52d 2026-06-27 06:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpasolpaii2i 2026-06-29 19:25:55+00:00| seen|...

GHSA-4GXV-P5G5-J7W7

creationtimestamp| type| source ---|---|--- 2026-06-26 23:42:14+00:00| seen| https://gist.github.com/alon710/aef49efca881722a2606f374108f34f4 2026-06-27 00:00:58+00:00| seen| https://gist.github.com/alon710/aef49efca881722a2606f374108f34f4...

CVE-2026-52785

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is a SQL injection in timestamps functionality. OpenProject baseline comparison allows callers to request historic work-package attributes using the timestamps parameter. This vulnerability is fix...

CVE-2026-52785 OpenProject: SQL injection in timestamps functionality

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is a SQL injection in timestamps functionality. OpenProject baseline comparison allows callers to request historic work-package attributes using the timestamps parameter. This vulnerability is fix...

CVE-2026-52785

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is a SQL injection in timestamps functionality. OpenProject baseline comparison allows callers to request historic work-package attributes using the timestamps parameter. This vulnerability is fix...

CVE-2026-52785 OpenProject: SQL injection in timestamps functionality

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is a SQL injection in timestamps functionality. OpenProject baseline comparison allows callers to request historic work-package attributes using the timestamps parameter. This vulnerability is fix...

CVE-2026-52785

OpenProject prior to versions 17.3.3 and 17.4.1 contains a SQL injection in the timestamps functionality. The vulnerability is tied to the baseline comparison feature, where the timestamps parameter can be used to request historic work-package attributes. The issue is fixed in 17.3.3 and 17.4.1. ...

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions in the futimes function of lib/internal/fs/promises.js, which backs FileHandle.utimes and performs no file system permission check. An attacker who can execute code in a process running under the Permission...

PT-2026-52916

Name of the Vulnerable Software and Affected Versions OpenProject versions prior to 17.3.3 OpenProject versions prior to 17.4.1 Description SQL injection exists in the timestamps functionality of the baseline comparison feature. This allows callers to request historic work-package attributes by...

CVE-2025-71361

creationtimestamp| type| source ---|---|--- 2026-06-24 13:49:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp22mka3ji2z 2026-06-24 14:30:53+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp24wkjxnn25 2026-06-24 17:18:03+00:00| seen|...

CVE-2026-56785

creationtimestamp| type| source ---|---|--- 2026-06-24 00:13:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moymzejeyd2t 2026-06-24 00:20:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moyng2q77o2f...

CVE-2026-11833

creationtimestamp| type| source ---|---|--- 2026-06-23 03:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mowfv5w3xq2w 2026-06-23 03:00:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116797186334941765 2026-06-23 03:15:09+00:00| seen|...

CVE-2026-56382

creationtimestamp| type| source ---|---|--- 2026-06-22 03:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3motvg3g7qm2x 2026-06-22 03:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116791523679077429 2026-07-09 15:11:49+00:00| seen|...

CVE-2025-71357

creationtimestamp| type| source ---|---|--- 2026-06-21 16:28:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3moss4gcist27 2026-06-21 17:23:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mosv6sga2a2k...

CVE-2025-71348

creationtimestamp| type| source ---|---|--- 2026-06-21 16:27:12+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mosrzrpvn52y 2026-06-21 17:14:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mosuo6f7cg2k 2026-06-22 11:40:01+00:00| seen|...

CVE-2026-56267 Flowise - PII Disclosure via Unauthenticated Forgot Password Endpoint

Flowise before 3.0.13 contains an information exposure vulnerability in the POST /api/v1/account/forgot-password endpoint that returns full user objects including PII to unauthenticated attackers. An attacker can enumerate valid email addresses and harvest sensitive user data including user IDs,...

CVE-2026-56081

creationtimestamp| type| source ---|---|--- 2026-06-19 23:19:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mooi4ovvat2e 2026-06-20 01:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moonslcm672y 2026-06-20 01:30:27+00:00| seen|...

GHSA-PHWJ-RPRQ-35PP

creationtimestamp| type| source ---|---|--- 2026-06-19 17:11:20+00:00| seen| https://gist.github.com/alon710/21026fb050081ef961f3644c807713b6 2026-06-19 17:22:09+00:00| seen| https://gist.github.com/alon710/61be013bad9ac90453bf311859cf9464...