GO-2026-5897 Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent in github.com/coder/coder

Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent in github.com/coder/coder...

CVE-2019-16728

creationtimestamp| type| source ---|---|--- 2026-07-07 14:02:53+00:00| seen| https://gist.github.com/UltraRamy/b344c7471b63468d9b5bc7bd3f33c59c...

CVE-2026-38076

creationtimestamp| type| source ---|---|--- 2026-07-06 07:51:10+00:00| seen| https://gist.github.com/dkjsone/c237b83ffa9ebd7028b5db7f410fcf78 2026-07-11 00:35:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdg5rrfll2w...

CVE-2026-14719

creationtimestamp| type| source ---|---|--- 2026-07-05 12:31:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvlf5y5lu26...

CVE-2026-14650

creationtimestamp| type| source ---|---|--- 2026-07-04 23:53:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpub26mrxk2o...

CVE-2026-9107

creationtimestamp| type| source ---|---|--- 2026-07-04 06:15:32+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpsfvyzdaf2c...

CVE-2026-53231

creationtimestamp| type| source ---|---|--- 2026-07-03 15:56:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqvw4jtt72y...

CVE-2026-56377

creationtimestamp| type| source ---|---|--- 2026-07-03 11:35:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqhdo273z2k...

CVE-2026-50721

creationtimestamp| type| source ---|---|--- 2026-07-02 23:53:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppa4jizl22w 2026-07-03 02:19:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mppibbebaj2x 2026-07-03 06:24:49+00:00| seen|...

CVE-2026-58024

creationtimestamp| type| source ---|---|--- 2026-07-02 02:45:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzalob7e2y 2026-07-02 04:32:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn77mty652u 2026-07-02 07:00:16+00:00| seen|...

CVE-2025-71352

creationtimestamp| type| source ---|---|--- 2026-07-01 02:37:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkie7csbt25...

GHSA-37R3-Q4CW-F7GQ

creationtimestamp| type| source ---|---|--- 2026-06-29 16:59:42+00:00| seen| https://gist.github.com/CyberKareem/37b525da8fcc1cc9bd9ee5e50b75f2b2...

CVE-2026-57328

creationtimestamp| type| source ---|---|--- 2026-06-29 16:11:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguuxldxi2t...

CVE-2026-40524

creationtimestamp| type| source ---|---|--- 2026-06-29 15:16:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgrs3atsj2j 2026-06-29 15:55:51+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpgtz42vwk25 2026-06-29 15:55:52+00:00| seen|...

CVE-2011-3002

creationtimestamp| type| source ---|---|--- 2026-06-28 14:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpe5hpq4kv2n...

CVE-2026-56447

creationtimestamp| type| source ---|---|--- 2026-06-27 20:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpccs6lve22g...

GHSA-985R-Q3QP-299H

creationtimestamp| type| source ---|---|--- 2026-06-26 21:42:10+00:00| seen| https://gist.github.com/alon710/e9c21cf2a4b3d2c5f2db0a4799f8c878 2026-07-14 01:00:05+00:00| seen| https://t.me/bdufstecru/3261 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3261...

CVE-2026-53128

creationtimestamp| type| source ---|---|--- 2026-06-24 18:45:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2l6ivx4f2c 2026-07-06 06:48:54+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

CVE-2026-53116

creationtimestamp| type| source ---|---|--- 2026-06-24 18:23:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2jwwelnj2c...

CVE-2026-54699 Warp: OS command injection when opening terminal links from WSL

Warp is an agentic development environment. From 0.2024.03.12.08.02.stable01 until 0.2026.05.06.15.42.stable01, Warp contains an OS command injection vulnerability in the WSL URL-opening fallback. When Warp is running under WSL and cannot open a URL through wslview, it falls back to a Windows...