CVE-2026-49834

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLogN1 or WithSignedCertificateTimestampsN1 counts verified witnesses per entry or per validation path rather than per log authority, allowing a single compromised...

UBUNTU-CVE-2026-49835

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.1.0, the global wrapMetrics middleware records raw HTTP request path r.URL.Path and raw HTTP request method r.Method as Prometheus labels for latency and request count metric vectors before routing, allowing an...

CVE-2026-49835 Sigstore Timestamp Authority: OOM due to unbounded metric label cardinality

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.1.0, the global wrapMetrics middleware records raw HTTP request path r.URL.Path and raw HTTP request method r.Method as Prometheus labels for latency and request count metric vectors before routing, allowing an...

CVE-2026-56171

creationtimestamp| type| source ---|---|--- 2026-07-17 14:00:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvwo4v522y 2026-07-17 14:00:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvwt7bfv2z 2026-07-17 19:29:06+00:00| seen|...

CVE-2026-15714

creationtimestamp| type| source ---|---|--- 2026-07-17 11:02:39+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqtlzeaocf23 2026-07-17 11:02:42+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqtlzhg67b24 2026-07-17 11:02:45+00:00| seen|...

CVE-2026-57076

creationtimestamp| type| source ---|---|--- 2026-07-17 00:03:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsh6birny2m 2026-07-17 01:08:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqsktsqhdz27...

CVE-2026-46512

creationtimestamp| type| source ---|---|--- 2026-07-16 18:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrvrushsg2x 2026-07-16 19:47:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqryvgoskh2u...

CVE-2026-45336

creationtimestamp| type| source ---|---|--- 2026-07-16 17:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrscyddbi2l 2026-07-16 19:25:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrxndfem52e...

CVE-2026-59866

creationtimestamp| type| source ---|---|--- 2026-07-16 15:54:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrluxqhxd2c 2026-07-16 16:50:14+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqroxp5a7c2p...

EUVD-2026-44917

HCL DFXAnalytics is affected by a Login Replay Attack vulnerability. The application allows a remote attacker to intercept, delay, or fraudulently retransmit valid authentication data to achieve unauthorized access. To mitigate this risk, the application must implement a mechanism to include...

CVE-2026-35141

The CVE-2026-35141 entry concerns HCL DFXAnalytics and a Login Replay Attack. The vulnerability enables a remote attacker to intercept, delay, or fraudulently retransmit valid authentication data to gain unauthorized access. The provided documentation attributes the issue to the lack of a mechani...

CVE-2023-49900

creationtimestamp| type| source ---|---|--- 2026-07-16 10:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqqztryhh52d 2026-07-16 10:47:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqr2p73vnu2i...

CVE-2026-15013

creationtimestamp| type| source ---|---|--- 2026-07-16 06:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116928127100536568 2026-07-16 06:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqqko4sy4f2z 2026-07-16 06:26:05+00:00| seen|...

CVE-2026-62948

creationtimestamp| type| source ---|---|--- 2026-07-15 18:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpeumdoqk2p 2026-07-15 19:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpfsyvg2m2m 2026-07-15 19:54:53+00:00| seen|...

CVE-2026-62378

creationtimestamp| type| source ---|---|--- 2026-07-15 17:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpbjey2z52o 2026-07-15 18:00:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpcg2jm3y2e 2026-07-15 19:12:44+00:00| seen|...

CVE-2026-48284

creationtimestamp| type| source ---|---|--- 2026-07-14 23:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndewdlkw2w 2026-07-14 23:19:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnds5jgt227 2026-07-16 04:07:06+00:00| seen|...

CVE-2026-48327

creationtimestamp| type| source ---|---|--- 2026-07-14 22:55:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnchrpcwo2e 2026-07-14 23:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndpo57ko24 2026-07-15 10:30:27+00:00| seen|...

CVE-2026-45363

creationtimestamp| type| source ---|---|--- 2026-07-14 22:16:11+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqnaaypv4m2v 2026-07-15 00:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqng3v7m442f 2026-07-15 00:00:44+00:00| seen|...

CVE-2026-50399

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:52+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:02+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:32+00:00| seen|...

CVE-2026-42975

creationtimestamp| type| source ---|---|--- 2026-07-14 18:12:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116919680066922390 2026-07-14 19:01:34+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 19:48:34+00:00| seen|...