connector-db-tools (0.0.1), pdf2dataset (>=0.1.0, <=0.4.0a1) +1 more potentially affected by CVE-2023-48022 via ray (0.8.6)

ray PYPI version 0.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - connector-db-tools 0.0.1 - pdf2dataset =0.1.0, =0.4.10, =0.4.11 Source cves: CVE-2023-48022 Source advisory: OSV:PYSEC-2026-517...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2024-1728 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2024-1728 Source advisory: OSV:PYSEC-2026-345...

The Gentlemen are knocking: сustom backdoors and evolving tactics

Introduction This year saw the emergence of The Gentlemen, a prominent example of a group operating under the ransomware-as-a-service RaaS model. Although our initial assessment suggested the group first appeared in mid-2025, it actually started ramping up its activities at the beginning of 2026...

Maestro 0.17.2

Maestro is a cross-platform desktop app for orchestrating your fleet of AI agents and projects. It's a high-velocity solution for hackers who are juggling multiple projects in parallel. Designed for power users who live on the keyboard and rarely touch the mouse. Collaborate with AI to create...

PT-2026-53545

Summary OAuthManager.validate token returns True for any token not found in its internal store, which is empty by default. Any HTTP request to the MCP server with an arbitrary Bearer token is treated as authenticated, granting full access to all registered tools and agent capabilities. Details...

PT-2026-53549

Summary PraisonAI's MCP Model Context Protocol server praisonai mcp serve registers four file-handling tools by default — praisonai.rules.create, praisonai.rules.show, praisonai.rules.delete, and praisonai.workflow.show. Each accepts a path or filename string from MCP tools/call arguments and joi...

PT-2026-53520

OpenViking prior to commit c7bb167 contains an authentication bypass vulnerability in the VikingBot OpenAPI HTTP route surface where the authentication check fails open when the api key configuration value is unset or empty. Remote attackers with network access to the exposed service can invoke...

PT-2026-53542

Executive Summary: The path validation has a critical logic bug: it checks for .. AFTER normpath has already collapsed all .. sequences. This makes the check completely useless and allows trivial path traversal to any file on the system. The path validation function also does not resolve the...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libsolv: libsolv-0.7.39-3.hum1 aarch64, x8664 libsolv-demo-0.7.39-3.hum1 aarch64, x8664 libsolv-devel-0.7.39-3.hum1 aarch64, x8664 libsolv-tools-0.7.39-3.hum1 aarch64, x8664...

WR41TH

WRAITH Offensive Security Framework — an all-in-one, menu-driven...

SUSE CVE-2026-53282

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Push kjump return address even for non-kjump kexec The version of purgatory code shipped by kexec-tools attempts to look above the top of its stack to find a return address for a kjump, even in a non-kjump kexec. After...

GHSA-4HF8-5MJM-RFGQ Streamable HTTP mode exposes LINE Desktop read/send tools without MCP authentication

Streamable HTTP mode exposes LINE Desktop read/send tools without MCP authentication Summary line-desktop-mcp supports a --http-mode Streamable HTTP transport for use with clients such as n8n. In this mode the server binds to 0.0.0.0 and exposes the MCP /mcp endpoint without an MCP-layer...

NPM: Streamable HTTP mode exposes LINE Desktop read/send tools without MCP authentication

NPM: Streamable HTTP mode exposes LINE Desktop read/send tools without MCP authentication vulnerability discovered by ? in WordPress Npm line-desktop-mcp versions = 1.1.1...

EUVD-2026-38058

mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call...

GHSA-2R68-G678-7QR3 mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call

Summary The HTTP MCP JSON-RPC endpoint at /mcp requires only OAuth read scope for all requests, then dispatches tools/call directly to handlers that include mutating tools. A read-only OAuth client can call storememory and deletememory through MCP even though the corresponding REST endpoints...

JLSEC-2026-650

An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted input file...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: glab, crossplane-provider-azure-authorization, docker, prometheus, gitlab-kas, slsa-verifier, nfpm, snyk-cli, vault-benchmark, loki, pulumi, act, wolfictl, atlantis, ksops, grype, kubernetes-dashboard, openbao, wal-g, apko, buildah, zot, rancher-agent, osv-scanner,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: glab, crossplane-provider-azure-authorization, crossplane-provider-aws-cloudwatchlogs, docker, prometheus, gitlab-kas, slsa-verifier, nfpm, crossplane-provider-aws-kms, snyk-cli, crossplane-provider-aws-cloudfront, vault-benchmark, loki, pulumi, act, wolfictl,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, flux-source-controller, skaffold, kubernetes, kyverno, gitlab-kas, prometheus, k9s, flux-image-automation-controller, snyk-cli, helm, cert-manager, loki, istio, kots, kubernetes-dashboard, external-dns, mattermost, prometheus-operator, mini...

DEBIAN-CVE-2026-53282

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Push kjump return address even for non-kjump kexec The version of purgatory code shipped by kexec-tools attempts to look above the top of its stack to find a return address for a kjump, even in a non-kjump kexec. After...