CVE-2026-55952

creationtimestamp| type| source ---|---|--- 2026-07-02 19:21:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoqvtlhjo2o 2026-07-03 08:38:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq5hhbt5t2n 2026-07-03 09:42:35+00:00| seen|...

CVE-2026-55110

creationtimestamp| type| source ---|---|--- 2026-07-02 18:51:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpop7glvx22w 2026-07-03 07:07:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppydky5l42i 2026-07-08 11:01:21+00:00| seen|...

CVE-2026-50747

creationtimestamp| type| source ---|---|--- 2026-07-02 18:23:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mponnaa4652m 2026-07-03 21:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpriv4u3qs2y 2026-07-08 11:01:21+00:00| seen|...

Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent

Command injection via dotfiles URI parameter combined with workspace auto-creation Summary The dotfiles registry module passed unsanitized user input to shell commands, allowing arbitrary code execution inside a provisioned workspace. Any user who supplied a crafted dotfilesuri value for example,...

GHSA-M3CR-VC2J-PM27 Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent

Command injection via dotfiles URI parameter combined with workspace auto-creation Summary The dotfiles registry module passed unsanitized user input to shell commands, allowing arbitrary code execution inside a provisioned workspace. Any user who supplied a crafted dotfilesuri value for example,...

CVE-2026-44935

creationtimestamp| type| source ---|---|--- 2026-07-02 18:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpomehucbl2t 2026-07-02 19:40:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mporyehyhq2b 2026-07-03 08:42:38+00:00| seen|...

CVE-2025-58902

creationtimestamp| type| source ---|---|--- 2026-07-02 17:05:07+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpojbp3e6w2v 2026-07-03 03:26:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpplzmqmgt2k 2026-07-03 11:39:39+00:00| seen|...

GHSA-2MJP-6Q6P-2QXM

creationtimestamp| type| source ---|---|--- 2026-07-02 16:42:16+00:00| seen| https://gist.github.com/konard/7292d01fd27ee78b9adfcdd581745d9e...

GHSA-G8M3-5G58-FQ7M

creationtimestamp| type| source ---|---|--- 2026-07-02 16:42:09+00:00| seen| https://gist.github.com/konard/7292d01fd27ee78b9adfcdd581745d9e...

GHSA-P88M-4JFJ-68FV

creationtimestamp| type| source ---|---|--- 2026-07-02 16:42:05+00:00| seen| https://gist.github.com/konard/7292d01fd27ee78b9adfcdd581745d9e...

CVE-2026-57760

creationtimestamp| type| source ---|---|--- 2026-07-02 16:04:20+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpofuyuxxe24 2026-07-03 00:46:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppd2oktjy2i 2026-07-03 03:53:14+00:00| seen|...

CVE-2026-50283

creationtimestamp| type| source ---|---|--- 2026-07-02 15:40:57+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpoel5pttq2i 2026-07-02 15:40:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoel6lse72r...

CVE-2026-37106

A flaw was found in DokuWiki. A remote attacker can create an account through the registration function. This occurs when the DokuWiki instance is configured to allow self-registration, which is not the default setting. This could lead to the creation of unauthorized user accounts. Mitigation To...

CVE-2026-8079

creationtimestamp| type| source ---|---|--- 2026-07-02 15:21:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpodiemxpv26 2026-07-03 07:25:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzdjgcdz26 2026-07-03 09:37:20+00:00| seen|...

CVE-2026-36912

creationtimestamp| type| source ---|---|--- 2026-07-02 14:29:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoalymrak2o 2026-07-03 09:00:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq6nlubk22m...

CVE-2026-54261

creationtimestamp| type| source ---|---|--- 2026-07-02 14:27:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoai3ophu2n 2026-07-02 14:27:40+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpoai5gvar2f 2026-07-03 13:30:06+00:00| seen|...

CVE-2026-54260

creationtimestamp| type| source ---|---|--- 2026-07-02 14:26:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoafqta2k2q 2026-07-03 13:26:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnj7hxnt2y...

CVE-2026-58653

PraisonAI before 0.1.7 fails to validate that projectid in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace...

CVE-2026-54431

creationtimestamp| type| source ---|---|--- 2026-07-02 13:15:04+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-54430 2026-07-02 23:12:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp5spl4n62n 2026-07-03 03:30:05+00:00| seen|...

CVE-2026-58653

CVE-2026-58653 affects PraisonAI prior to 0.1.7, where issue creation/update does not validate that project_id matches the URL workspace. This allows an attacker to reference projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace co...