GHSA-79QM-7RJ5-M7R9

creationtimestamp| type| source ---|---|--- 2026-08-07 23:35:49+00:00| seen| https://gist.github.com/alon710/5988f40586bcc25ff4d614f1ea49845f 2026-08-08 00:01:19+00:00| seen| https://gist.github.com/alon710/5988f40586bcc25ff4d614f1ea49845f...

CVE-2026-57858

creationtimestamp| type| source ---|---|--- 2026-08-07 23:09:24+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97085 2026-08-08 00:02:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97085 2026-08-08 23:04:23+00:00| published-proof-of-concept|...

GHSA-F23P-VX2J-J53R

creationtimestamp| type| source ---|---|--- 2026-08-07 22:31:14+00:00| seen| https://gist.github.com/alon710/6634ad7314d99c5586618c1848016378 2026-08-08 00:01:19+00:00| seen| https://gist.github.com/alon710/6634ad7314d99c5586618c1848016378...

GHSA-5P4M-2WFM-XMQJ

creationtimestamp| type| source ---|---|--- 2026-08-07 22:06:55+00:00| seen| https://gist.github.com/gomesalexandre/8cd74b41b9830109d823dcb777041502 2026-09-03 19:24:03+00:00| seen| https://gist.github.com/konard/05d19a59942ef51514e30abcc55dbc13 2026-09-03 20:23:57+00:00| seen|...

CVE-2026-67422

creationtimestamp| type| source ---|---|--- 2026-08-07 21:05:02+00:00| published-proof-of-concept| https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-gm37-52c6-37mw 2026-08-08 02:32:35+00:00| seen| https://gist.github.com/alon710/6f3e0768fc0386f4c965af62333fef78 2026-08-1...

GHSA-FP3F-MC75-235C

creationtimestamp| type| source ---|---|--- 2026-08-07 20:34:02+00:00| seen| https://gist.github.com/alon710/51a19d7e4b20307e86a86a2096f8e2e7...

GHSA-2V8P-3F2J-5MP7 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, langfuse-fips, gitlab-rails-ce, langfuse...

GHSA-6X64-9X62-F2GX vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, langfuse-fips, gitlab-rails-ce, langfuse...

GHSA-3F7W-8RR8-F37F vulnerabilities

Vulnerabilities for packages: jupyter-all-spark-notebook, mlflow, awx...

GHSA-W737-WX49-QJ23 vulnerabilities

Vulnerabilities for packages: zipkin, apicurio-registry, dependency-track, infinispan, keycloak...

GHSA-FWG2-594C-JP42

creationtimestamp| type| source ---|---|--- 2026-08-07 19:36:23+00:00| seen| https://gist.github.com/alon710/81b96826f50cad7313904ff9c7c75f2e...

[SECURITY] [DSA 6418-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6418-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 07, 2026 https://www.debian.org/security/faq -...

GHSA-MMJ4-63M4-R6H5

creationtimestamp| type| source ---|---|--- 2026-08-07 18:58:46+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3msjag2qwrq25...

0x-assert (>=0.0.2, <=0.0.3), 0xauth (>=0.0.5, <=0.1.0) +7329 more potentially affected by CVE-2026-71851 via crypto-js (>=3.1.2, <=3.3.0)

crypto-js NPM version =3.1.2, =0.0.2, =0.0.5, =1.0.0, =1.0.0, =1.34.1, =0.1.0, =4.11.2, =0.0.1, =3.3.9, =3.10.1, =0.0.16-0.1, =0.0.4, =0.0.7 and more Source cves: CVE-2026-71851 Source advisory: SNYK:JS-CRYPTOJS-18599395...

@aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3), @activepieces/piece-ai (>=0.3.1, <=0.3.4) +452 more potentially affected by CVE-2026-71848 via hono (>=4.12.0, <=4.12.33)

hono NPM version =4.12.0, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.0-pr-306-20260707164534, =0.1.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.4 and more Source cves: CVE-2026-71848 Source advisory: SNYK:JS-HONO-18593786...

@aaarc/recursivelearnmcp (>=0.1.0, <=0.1.3), @activepieces/piece-ai (>=0.3.1, <=0.3.4) +452 more potentially affected by CVE-2026-71848 via hono (>=4.12.0, <=4.12.33)

hono NPM version =4.12.0, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.0-pr-306-20260707164534, =0.1.0, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.4 and more Source cves: CVE-2026-71848 Source advisory: OSV:GHSA-54FX-42GC-7VW4...

CVE-2026-68943

creationtimestamp| type| source ---|---|--- 2026-08-07 18:35:04+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-xj6q-8x83-jv6g...

GHSA-P9JM-Q85P-7MCP

creationtimestamp| type| source ---|---|--- 2026-08-07 18:31:18+00:00| seen| https://gist.github.com/alon710/8c320d44f4f97b648e1d03dded62d53e...

CVE-2026-56818

creationtimestamp| type| source ---|---|--- 2026-08-07 18:31:18+00:00| seen| https://gist.github.com/alon710/8c320d44f4f97b648e1d03dded62d53e 2026-08-07 18:35:07+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-p9jm-q85p-7mcp...

jsii-diff: Command Injection via npm: package argument

Summary jsii-diff is a command line tool to compare the API differences between two jsii assemblies, and report errors if there are backwards-incompatible changes to the API. An issue exists where specially formatted command line arguments can be used to execute shell commands via this tool. Impa...