CVE-2026-27567

creationtimestamp| type| source ---|---|--- 2026-02-25 04:40:18+00:00| seen| https://gist.github.com/alon710/1f5269447a1894adbb81b93906c7462d...

GHSA-M2CQ-XJGM-F668

creationtimestamp| type| source ---|---|--- 2026-02-25 04:10:19+00:00| seen| https://gist.github.com/alon710/b552dead23033effdfd76ba11d312188...

CVE-2026-27637 FreeScout's Predictable Authentication Token Enables Account Takeover

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.206, FreeScout's TokenAuth middleware uses a predictable authentication token computed as MD5userid + createdat + APPKEY. This token is static never expires/rotates, and if an attacker obtains...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the CreateNewDAG API endpoint when the DAG name is not properly validated before being passed to the file store. An attacker can write arbitrary YAML files outside the intended directory, potentially overwriting...

GHSA-X76F-JF84-RQJ8

creationtimestamp| type| source ---|---|--- 2026-02-25 02:40:26+00:00| seen| https://gist.github.com/alon710/0a4d2120827a83418bc6e8325fbd6767...

CVE-2026-3133

creationtimestamp| type| source ---|---|--- 2026-02-25 01:26:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnjn5wcah24 2026-02-26 12:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfr5ikfyig2l...

CVE-2026-3134

creationtimestamp| type| source ---|---|--- 2026-02-25 01:21:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnje7icfp2u 2026-02-26 01:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfpzpxm5q22m...

GHSA-G3GW-Q23R-PGQM

creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:20+00:00| seen| https://gist.github.com/alon710/3c4ee34d2cdc53cc5dccf62f09e44104...

GHSA-QRVQ-68C2-7GRW

creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:14+00:00| seen| https://gist.github.com/alon710/fd5d02a6656a9e8c9e49f270ac2dcd9c...

GHSA-9FWW-8CPR-Q66R

creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:13+00:00| seen| https://gist.github.com/alon710/b49abcb62186b1e9a08e776c001b1b45...

GHSA-GWR3-X37H-H84V

creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:08+00:00| seen| https://gist.github.com/alon710/5e35b72698f3cf694fe848d6fa99d6b9...

GHSA-V994-63CG-9WJ3

creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:07+00:00| seen| https://gist.github.com/alon710/93497b272a1acc6d5d3838b0e2ce709a...

CVE-2026-27156

creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:04+00:00| seen| https://gist.github.com/alon710/2374cc8dbd605d3c0e5e8ece442a11db...

GHSA-JXQ9-79VJ-RGVW

creationtimestamp| type| source ---|---|--- 2026-02-25 01:07:58+00:00| seen| https://gist.github.com/alon710/12958c247a7b9f50af1a0648fa1cd2df...

CVE-2026-27204

creationtimestamp| type| source ---|---|--- 2026-02-25 01:07:51+00:00| seen| https://gist.github.com/alon710/4e9c4bed9ad14feae28c1474018f41b3...

CVE-2026-27598

CVE-2026-27598 affects Dagu up to version 1.16.7. The issue is in the CreateNewDAG API (POST /api/v1/dags) where DAG name validation is skipped before writing to the file store, allowing an authenticated user with DAG write permissions to write arbitrary YAML files on the filesystem. Since Dagu e...

CVE-2026-27598 Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory

Dagu is a workflow engine with a built-in Web user interface. In versions up to and including 1.16.7, the CreateNewDAG API endpoint POST /api/v1/dags does not validate the DAG name before passing it to the file store. An authenticated user with DAG write permissions can write arbitrary YAML files...

CVE-2026-27598 Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory

Dagu is a workflow engine with a built-in Web user interface. In versions up to and including 1.16.7, the CreateNewDAG API endpoint POST /api/v1/dags does not validate the DAG name before passing it to the file store. An authenticated user with DAG write permissions can write arbitrary YAML files...

CVE-2026-2787

creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:21+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevsrrem2c 2026-02-26 13:17:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfrbs2azou2n 2026-02-28 02:01:57+00:00| seen|...

CVE-2026-2785

creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:21+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevsrrem2c 2026-02-28 02:01:56+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4yg5pzm2o...