CVE-2026-11718

creationtimestamp| type| source ---|---|--- 2026-06-18 13:13:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokvs5esly2y 2026-06-18 14:00:17+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mokygbvzep2c 2026-06-18 14:00:30+00:00| seen|...

CVE-2026-55742

creationtimestamp| type| source ---|---|--- 2026-06-18 08:48:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokgyupp3y2v...

CVE-2026-10736

creationtimestamp| type| source ---|---|--- 2026-06-18 08:15:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokf5nzsdj2z 2026-06-19 02:33:25+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3momciyt73y2g...

CVE-2026-12111

creationtimestamp| type| source ---|---|--- 2026-06-18 07:53:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokdwruxn624...

SUSE-SU-2026:2441-1 Security update for rustup

This update for rustup fixes the following issues - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257902. - rust-shlex: Multiple issues involving quote API RUSTSEC-2024-0006, GHSA-r7qv-8r2h-pg27 bsc1230032...

CVE-2026-40624

creationtimestamp| type| source ---|---|--- 2026-06-18 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-169-01 2026-06-19 04:03:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3momhk3tmue2g 2026-06-19 05:01:02+00:00| seen|...

CVE-2026-45357

LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the date filter's strftime implementation parses width specifiers like %9999999d and forwards the captured width unchecked into pad/padStart, leading to memory and render limit...

CVE-2026-9189

creationtimestamp| type| source ---|---|--- 2026-06-17 23:13:25+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3mojguhyudr2s 2026-06-19 00:54:32+00:00| seen| https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mom4y6nw622s 2026-09-01 20:00:07+00:00| seen|...

CVE-2026-39560

creationtimestamp| type| source ---|---|--- 2026-06-17 23:13:23+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mojgufnwu72s...

CVE-2026-54388

creationtimestamp| type| source ---|---|--- 2026-06-17 23:05:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojgffzrlv2c 2026-08-02 15:23:25+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms4c2epkfr2c...

CVE-2026-48823

creationtimestamp| type| source ---|---|--- 2026-06-17 22:43:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojf6h6akq2f...

CVE-2026-45357 LiquidJS: Memory and render limit bypass via unbounded width padding in `date` filter (strftime)

LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the date filter's strftime implementation parses width specifiers like %9999999d and forwards the captured width unchecked into pad/padStart, leading to memory and render limit...

CVE-2026-45357 LiquidJS: Memory and render limit bypass via unbounded width padding in `date` filter (strftime)

LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the date filter's strftime implementation parses width specifiers like %9999999d and forwards the captured width unchecked into pad/padStart, leading to memory and render limit...

CVE-2026-45357 LiquidJS: Memory and render limit bypass via unbounded width padding in `date` filter (strftime)

LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the date filter's strftime implementation parses width specifiers like %9999999d and forwards the captured width unchecked into pad/padStart, leading to memory and render limit...

EUVD-2026-37827

LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the date filter's strftime implementation parses width specifiers like %9999999d and forwards the captured width unchecked into pad/padStart, leading to memory and render limit...

CVE-2026-45357

CVE-2026-45357 — LiquidJS date filter (strftime) DoS via unbounded width padding . In LiquidJS

CVE-2026-30802

creationtimestamp| type| source ---|---|--- 2026-06-17 21:21:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojam2yhus2f...

EUVD-2026-37558

The LearnPress WordPress plugin before 4.3.7 does not gate the edit context on one of its REST endpoint behind the editusers capability, allowing unauthenticated visitors to retrieve each returned user's roles, full capabilities map, extra capabilities, locale, and registration date via a crafted...

CVE-2026-6734

creationtimestamp| type| source ---|---|--- 2026-06-17 16:40:20+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moiqvjtjr22g 2026-06-18 15:59:03+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mol72n3uli2x 2026-06-19 05:12:21+00:00| seen|...

CVE-2026-9675

creationtimestamp| type| source ---|---|--- 2026-06-17 16:24:39+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moipzi2kmc2g 2026-06-17 19:00:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiyr2plnu2x 2026-06-18 15:59:02+00:00| seen|...