CVE-2026-59996

creationtimestamp| type| source ---|---|--- 2026-07-08 04:04:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4ai3r6lf2w 2026-07-08 22:47:27+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mq677cepsk2y 2026-07-10 08:02:23+00:00| seen|...

CVE-2026-55077

creationtimestamp| type| source ---|---|--- 2026-07-08 00:59:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3w4fg6mc2x...

CVE-2026-42953

creationtimestamp| type| source ---|---|--- 2026-07-08 00:02:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3sw5xhxj2k...

UI Patterns (SDC in Drupal UI) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-075

This module enables you to use Single Directory Components in site building views, field formatters, blocks, layouts and it improves the Developer Experience DX with SDC. The module doesn't sufficiently sanitize the markup passed to components under certain scenarios. This vulnerability is...

PT-2026-56585

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 16.5 through 18.11.6 GitLab CE/EE versions 19.0 through 19.0.3 GitLab CE/EE versions 19.1 through 19.1.1 Description An issue exists where an authenticated user can create a repository where the content displayed in the w...

PT-2026-56466

Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.63.16 Description An issue exists in the ScopedFs component where the system validates the nearest existing ancestor of a dangling symlink as being within scope and subsequently follows that symlink during file...

CVE-2026-55633

creationtimestamp| type| source ---|---|--- 2026-07-07 23:57:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3sn7h6ac2t...

CVE-2026-42958

creationtimestamp| type| source ---|---|--- 2026-07-07 23:49:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3s6sucnj27...

CVE-2026-53751

creationtimestamp| type| source ---|---|--- 2026-07-07 23:33:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3rc3ggo22g...

CVE-2026-14740

creationtimestamp| type| source ---|---|--- 2026-07-07 22:49:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq3ouijcn52u 2026-07-08 00:30:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3uhdt7mm2w 2026-07-08 14:12:04+00:00| seen|...

CVE-2026-59706

creationtimestamp| type| source ---|---|--- 2026-07-07 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq3lju4gqu2f 2026-07-07 23:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3rokhsrv2g 2026-07-09 13:31:54+00:00| seen|...

CVE-2026-48950

creationtimestamp| type| source ---|---|--- 2026-07-07 21:20:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3juz5a5l2w 2026-07-08 14:15:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n...

CVE-2026-58468

creationtimestamp| type| source ---|---|--- 2026-07-07 20:43:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3hsu7ftx2t...

CVE-2026-44454 Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7 and 2.30.2, the dotfiles registry module passed unsanitized user input to shell commands, allowing arbitrary code execution inside a provisioned workspace. Any user who supplied a craft...

CVE-2026-44454

Coder is vulnerable to command injection in the dotfiles registry module, exploitable via crafted dotfiles_uri values and the mode=auto workflow. Root cause: unsanitized user input interpolated into shell commands, enabling arbitrary code execution inside a provisioned workspace, especially when ...

CVE-2026-59708

creationtimestamp| type| source ---|---|--- 2026-07-07 19:22:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3dbuyp2o2i...

CVE-2026-48958

An improper access check allows unauthorized users to create custom fields via webservices endpoints...

CVE-2021-21638

creationtimestamp| type| source ---|---|--- 2026-07-07 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq3735hw5v24...

CVE-2026-48958 Joomla! Core - [20260712] - Incorrect Access Control in com_fields webservice endpoints

An improper access check allows unauthorized users to create custom fields via webservices endpoints...

CVE-2026-53479

creationtimestamp| type| source ---|---|--- 2026-07-07 16:08:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2yhdqmmp27 2026-07-08 09:00:23+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mq4qyhbjfr2v...