CVE-2026-67858

Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server LDS is built with multicast discovery enabled through the MDNSD backend. An unauthenticated remote attacker can send a RegisterServer or RegisterServer2 request containing many unique discoveryUrls. This allow...

Important: aws-nitro-enclaves-cli

Issue Overview: rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocspresponders returns OCSP responder URLs from a certificate's AIA extension as OpensslString, whose Deref wraps the raw bytes with str::fromutf8unchecked. OpenSSL doe...

CVE-2026-67858

Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server LDS is built with multicast discovery enabled through the MDNSD backend. An unauthenticated remote attacker can send a RegisterServer or RegisterServer2 request containing many unique discoveryUrls. This allow...

Amazon Linux 2023 : aws-nitro-enclaves-cli, aws-nitro-enclaves-cli-devel, aws-nitro-enclaves-cli-integration-tests (ALAS2023-2026-2034)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2034 advisory. rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocspresponders returns OCSP responder URLs from a certificate's AIA extension as...

SUSE CVE-2026-67322

GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clonefrom. The caller-supplied remote URL is passed through Git.polishurl, which on non-Cygwin platforms calls os.path.expandvars on the URL before invoking git clone. An attacker who controls the clone URL can emb...

CVE-2026-67338

A flaw was found in JupyterLab. The Extension Manager fails to validate URI protocols in package metadata URLs. This allows attackers to publish malicious PyPI packages containing javascript: URLs in their project metadata. When a user clicks on the extension name, arbitrary JavaScript code can b...

CVE-2026-15950

creationtimestamp| type| source ---|---|--- 2026-08-01 17:39:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzz63hfnh2d 2026-08-01 17:39:18+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrzz6gz75r2n 2026-08-01 18:39:00+00:00| seen|...

CVE-2026-16614

creationtimestamp| type| source ---|---|--- 2026-08-01 17:35:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzyxryvnf2i 2026-08-01 17:36:07+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzyyqr2ya22 2026-08-01 19:00:39+00:00| seen|...

CVE-2026-14823

creationtimestamp| type| source ---|---|--- 2026-08-01 15:02:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzqfpqsbf2v 2026-08-01 15:14:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzr2yggdo2b 2026-08-01 15:14:43+00:00| seen|...

CVE-2026-14195

creationtimestamp| type| source ---|---|--- 2026-08-01 14:58:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzq63q6ne2b 2026-08-01 15:25:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzrosopge2x 2026-08-01 15:25:38+00:00| seen|...

CVE-2026-15244

creationtimestamp| type| source ---|---|--- 2026-08-01 14:55:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzq2437k52v 2026-08-01 14:56:18+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzq2ydcbl2j 2026-08-01 15:29:04+00:00| seen|...

CVE-2025-71403

better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute URLs and wildcard domains. Attackers can construct malicious callbackURL parameters that pass origin checks and trigger open redirects to steal sensitive tokens for account...

CVE-2025-71403 better-auth before 1.1.20 Open Redirect via trustedOrigins Bypass

better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute URLs and wildcard domains. Attackers can construct malicious callbackURL parameters that pass origin checks and trigger open redirects to steal sensitive tokens for account...

EUVD-2026-51849

JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers can publish malicious PyPI packages with javascript: URLs in project metadata that execute arbitrary JavaScript in the...

CVE-2026-67338 JupyterLab before 4.5.9 Stored XSS via Extension Manager

JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers can publish malicious PyPI packages with javascript: URLs in project metadata that execute arbitrary JavaScript in the...

CVE-2026-67338

CVE-2026-67338 affects JupyterLab prior to 4.5.9. A stored cross-site scripting vulnerability resides in the Extension Manager where URI protocols in package metadata URLs are not validated. This allows an attacker to publish malicious PyPI packages with javascript: URLs in project metadata, enab...

CVE-2026-67338

JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers can publish malicious PyPI packages with javascript: URLs in project metadata that execute arbitrary JavaScript in the...

CVE-2026-45377 Decidim: Private exports can be downloaded through reusable links

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the normal downloadyourdata flow requires the requester to be logged in as the export owner, but the resulting Active Storage blob redirect URL can be replayed without...

CVE-2026-68770

creationtimestamp| type| source ---|---|--- 2026-07-31 21:57:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3nq3sqt35utpv 2026-07-31 22:00:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxxbyuldy2z 2026-07-31 22:06:06+00:00| seen|...

@apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host header

Summary When prettyUrls: true is enabled on @apostrophecms/file a documented SEO feature for serving uploaded files at clean URLs, the public pretty-URL handler builds the upstream URL using the raw Host HTTP request header: js proxyUrl = $req.protocol://$req.get'host'$uglyUrl That URL is then...