CVE-2026-35676

creationtimestamp| type| source ---|---|--- 2026-05-20 15:45:53+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-9qv9-8xv6-5p35 2026-05-28 17:34:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwklaw3se2c...

CVE-2026-3985

creationtimestamp| type| source ---|---|--- 2026-05-20 15:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmc7zsxv322c...

CVE-2026-47068

creationtimestamp| type| source ---|---|--- 2026-05-20 15:28:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmc7sv2h5b2h...

GHSA-5C46-X3QW-Q7J7

creationtimestamp| type| source ---|---|--- 2026-05-20 14:50:44+00:00| seen| https://t.me/bdufstecru/3182...

GHSA-CQ46-HP4H-CVFR

creationtimestamp| type| source ---|---|--- 2026-05-20 14:47:50+00:00| seen| https://t.me/bdufstecru/3179...

CVE-2026-45770

creationtimestamp| type| source ---|---|--- 2026-05-20 14:15:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3qtiaud2c...

CVE-2026-45767

creationtimestamp| type| source ---|---|--- 2026-05-20 14:15:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3qtiaud2c...

Malicious code in @limebike/supreme-date-pickers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c82e94fac384ea6891e5aea99635ab429663e321502acbbc9eaaf81864e0d5e On npm install, both preinstall and postinstall hooks execute index.js, which collects the installer's hostname, all non-internal network interface I...

MAL-2026-4190 Malicious code in @limebike/supreme-date-pickers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c82e94fac384ea6891e5aea99635ab429663e321502acbbc9eaaf81864e0d5e On npm install, both preinstall and postinstall hooks execute index.js, which collects the installer's hostname, all non-internal network interface I...

GHSA-RG75-Q538-X34V

creationtimestamp| type| source ---|---|--- 2026-05-20 11:20:50+00:00| seen| https://gist.github.com/alon710/261ffaf79cb2412380434d62f37902b8...

CVE-2026-45064

creationtimestamp| type| source ---|---|--- 2026-05-20 10:57:17+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbqofftwz2n 2026-05-20 11:59:01+00:00| seen| https://bsky.app/profile/mradcliffe.nokoto.org.ap.brid.gy/post/3mmbu4igtlyo2...

CVE-2026-46639

creationtimestamp| type| source ---|---|--- 2026-05-20 10:31:59+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbpb53e6r2y...

CVE-2026-46629

creationtimestamp| type| source ---|---|--- 2026-05-20 10:31:16+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbp7unvxr2b...

CVE-2026-46633

creationtimestamp| type| source ---|---|--- 2026-05-20 10:30:57+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbp77j3sk2h...

CVE-2026-24209

creationtimestamp| type| source ---|---|--- 2026-05-20 07:11:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbe272t6k2r...

CVE-2026-24208

creationtimestamp| type| source ---|---|--- 2026-05-20 06:34:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbbxzouak2i...

Astra Linux - уязвимость в ruby2.5

In the date gem for Ruby, from version 3.2.0 onwards, Date.parse can cause ReDoS Regular Expression Denial of Service attacks due to the use of a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

Astra Linux - уязвимость в jqueryui

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField option from untrusted sources might execute untrusted code. This issue has been fixed in jQuery UI 1.13.0. Any string value passed to the altField option is now treated as a CSS...

Astra Linux - уязвимость в jqueryui

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various Text options of the Datepicker widget from untrusted sources might execute untrusted code. This issue has been fixed in jQuery UI 1.13.0. The values passed to various Text options are...

Astra Linux - уязвимость в libusrsctp

The usrsctp before December 20, 2019, has out-of-bounds reads in sctploadaddressesfrominit...