CVE-2026-17435 File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files

File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files. When the file to be rotated is a symbolic link to a missing file, and the touch option is enabled, then the rotate method assumes that the file is absent since the existence check is...

CVE-2026-17435

Versions of the Perl module File::Rotate::Simple before 0.4.0 are vulnerable to a flaw where the software creates the target of dangling symlinks during file rotation. When the rotation target is a symlink to a non-existent file and the touch option is enabled, the module incorrectly assumes the ...

CVE-2026-17435 File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files

File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files. When the file to be rotated is a symbolic link to a missing file, and the touch option is enabled, then the rotate method assumes that the file is absent since the existence check is...

CVE-2026-67585 Atom Exhaustion via _entities Representation Keys in DivvyPayHQ absinthe_federation

Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthefederation allows an unauthenticated remote attacker to abort the Erlang VM via crafted entities representation keys. Every key of every object in the representations argument of the federation-mandated...

GHSA-WVPP-8HX9-P66J

creationtimestamp| type| source ---|---|--- 2026-08-07 16:40:33+00:00| seen| https://gist.github.com/alon710/7b081fe119ed64f00c308eff03c67cc3...

CVE-2026-17594 Nexus Repository 3 - Authorization Bypass in Repository Creation

Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability CWE-863 in the repository-creation user interface. An individual user account holding a delegated repository-admin privilege scoped to a specific repository format could create a repository of...

CVE-2026-17594

CVE-2026-17594 affects Nexus Repository 3 CE/Pro versions 3.0.0–3.94.x. The root cause is an authorization mismatch in the repository-creation UI: a delegated repository-admin (scoped to a specific format) could cause a repository of a different, unauthorized format to be created because authoriz...

CVE-2026-17594 Nexus Repository 3 - Authorization Bypass in Repository Creation

Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability CWE-863 in the repository-creation user interface. An individual user account holding a delegated repository-admin privilege scoped to a specific repository format could create a repository of...

CVE-2026-17594 Nexus Repository 3 - Authorization Bypass in Repository Creation

Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability CWE-863 in the repository-creation user interface. An individual user account holding a delegated repository-admin privilege scoped to a specific repository format could create a repository of...

CVE-2026-17598

Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...

CVE-2024-24210

creationtimestamp| type| source ---|---|--- 2026-08-07 16:02:15+00:00| seen| Telegram/f4Vytjn-MRLHBVgNi9AN52s9pui8b8Txh36DWLXfR9Gx-I 2026-08-08 00:04:27+00:00| seen| Telegram/f4Vytjn-MRLHBVgNi9AN52s9pui8b8Txh36DWLXfR9Gx-I...

GHSA-HMQ2-W58F-27JC GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython

Summary GitPython computes the on-disk location of a submodule's separate Git directory .git/modules/ from the submodule's .gitmodules section name with no validation. Because that name is fully attacker-controlled content of a cloned repository, a malicious repository can set a submodule name to...

External Control of File Name or Path

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to External Control of File Name or Path via the handling of submodule names in the .gitmodules configuration. An attacker can cause arbitrary directories and Git...

GHSA-JFM3-95JQ-Q3RF

creationtimestamp| type| source ---|---|--- 2026-08-07 14:32:36+00:00| seen| https://gist.github.com/alon710/083e0c15dfeb9a6ae7deb8244b73b528...

CVE-2026-66838

creationtimestamp| type| source ---|---|--- 2026-08-07 14:27:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fhy2mjveaoejp...

GHSA-MH25-X5HQ-WRQP

creationtimestamp| type| source ---|---|--- 2026-08-07 13:34:35+00:00| seen| https://gist.github.com/alon710/09e2e2055df2711d8dcc906978bf0f47...

GHSA-MJ63-M3RC-8PPR

creationtimestamp| type| source ---|---|--- 2026-08-07 12:34:21+00:00| seen| https://gist.github.com/alon710/b81b5b8f072a27c4fa74e05558afb769...

MAL-2026-13531 Malicious code in damir-cbr-dawdntrnssbf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b201b86e8198a519343eebfaa548af8848dcad42b507826b052f5c97fbcfa90f On require of the package, polyfill.js downloads a platform-specific binary from attacker-controlled Cloudflare Workers hosts...

MAL-2026-13537 Malicious code in ded-pwa-test-pub-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1383d653a37b7e74a16850e3c1bf474ca310c0755505f3efd7f613ba0e553e08 On module load, index.js requires./compat.js which assembles remote hostnames from split string literals e.g...

CVE-2026-54212

creationtimestamp| type| source ---|---|--- 2026-08-07 12:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/117054113463561947 2026-08-07 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msij23ny7t2v...