CVE-2026-53916

creationtimestamp| type| source ---|---|--- 2026-06-29 22:11:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphiyhkhyq2g 2026-07-03 10:53:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqexp6nu22y...

CVE-2026-38639

creationtimestamp| type| source ---|---|--- 2026-06-29 21:48:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhovmjzu2n...

CVE-2026-52760

creationtimestamp| type| source ---|---|--- 2026-06-29 21:38:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphh55tg752z...

CVE-2026-49434

creationtimestamp| type| source ---|---|--- 2026-06-29 21:28:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphgldvzkq2a 2026-07-03 10:59:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqfcdufmu2u...

CVE-2026-46417

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22, a Server-Side Request Forgery SSRF vulnerability exists in @angular/platform-server. The issue stems from how...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the readremotefile function. An attacker can access internal network resources or disclose arbitrary local files by supplying a crafted CSS file containing a malicious @import url... directive, which...

CVE-2026-57498

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, Coolify's API controllers consistently validate server ownership with Server::whereTeamId$teamId before any operation. However, multiple Livewire web UI components accept...

CVE-2026-39031

creationtimestamp| type| source ---|---|--- 2026-06-29 20:02:51+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mphbsqpagi2y 2026-06-29 21:41:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhdtfuob2e 2026-07-13 22:00:21+00:00| seen|...

GHSA-VWXW-JRG6-9JXV

creationtimestamp| type| source ---|---|--- 2026-06-29 19:31:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116835056501762471...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection in the rule ID path parameter of the alert-history endpoints. An attacker can execute arbitrary database queries and access sensitive data by injecting specially crafted input. This may also allow the attacker to perform...

CVE-2026-54889

Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...

CVE-2026-54889

Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...

EEF-CVE-2026-54889 Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS)

Summary Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':to\delta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':default\convert\node/3...

CVE-2026-54889

Summary: CVE-2026-54889 security issue in Elixir.MDEx.mdex Delta conversion path allows XSS via unsanitized URL schemes in Quill Delta output. The vulnerability arises when Elixir.MDEx.DeltaConverter.default_convert_node/3 copies the URL from link, wikilink, or image nodes into the Delta attribut...

CVE-2026-57958

creationtimestamp| type| source ---|---|--- 2026-06-29 19:09:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph6tdx2xt22 2026-06-29 21:24:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphgf7rael2y...

CVE-2026-57946

creationtimestamp| type| source ---|---|--- 2026-06-29 18:53:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5w56s7h2g 2026-06-29 21:17:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphfxm2eap2k...

CVE-2025-70101

creationtimestamp| type| source ---|---|--- 2026-06-29 18:53:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mph5vwj3n22g...

CVE-2026-57950

creationtimestamp| type| source ---|---|--- 2026-06-29 18:49:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5pretwz23 2026-06-29 21:57:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphi75nrkv2n 2026-06-29 22:25:35+00:00| seen|...

CVE-2026-56780

creationtimestamp| type| source ---|---|--- 2026-06-29 18:46:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5k4naqc2n...

CVE-2026-57948

creationtimestamp| type| source ---|---|--- 2026-06-29 18:35:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph4vqqetc2b 2026-06-29 21:28:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphglkar5j2e...