CVE-2026-10130

creationtimestamp| type| source ---|---|--- 2026-07-18 22:30:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/116943344312678030 2026-07-18 22:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqxcw4d2h424 2026-07-18 23:35:46+00:00| seen|...

CVE-2026-15322

creationtimestamp| type| source ---|---|--- 2026-07-18 18:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwtunfxgl2l 2026-07-19 05:13:42+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqxzh7sx6a2d 2026-07-19 05:14:11+00:00| seen|...

CVE-2026-16120

creationtimestamp| type| source ---|---|--- 2026-07-18 16:24:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwoiipiwv2i...

CVE-2025-71395

creationtimestamp| type| source ---|---|--- 2026-07-18 16:11:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwnr4wefx22...

CVE-2025-71391

creationtimestamp| type| source ---|---|--- 2026-07-18 15:48:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwmhbruca2e...

CVE-2026-16117

creationtimestamp| type| source ---|---|--- 2026-07-18 13:14:19+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mqwdtonr6k25 2026-07-18 14:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqwifxu7mz2z 2026-07-18 15:00:46+00:00| seen|...

CVE-2026-16084

creationtimestamp| type| source ---|---|--- 2026-07-18 11:56:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqw7ip6m2g2i...

CVE-2026-9734

creationtimestamp| type| source ---|---|--- 2026-07-18 06:51:27+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116939652207836159 2026-07-18 07:44:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqvrgqocrf2q...

CVE-2026-44979

creationtimestamp| type| source ---|---|--- 2026-07-18 00:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquzfwqwag27...

CVE-2026-54243

creationtimestamp| type| source ---|---|--- 2026-07-17 23:51:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquwyzxvhl2b...

CVE-2026-16016

creationtimestamp| type| source ---|---|--- 2026-07-17 18:34:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqufbrv4uc2x...

CVE-2026-52746 JSONata: Malicious inputs to "$toMillis" function can cause resource exhaustion

JSONata is a JSON query and transformation language. Prior to 2.2.0 and 1.8.9, malicious non-matching inputs to the $toMillis function can cause superlinear backtracking in the ISO-8601 validation regex, leading to denial of service in applications that evaluate user-provided JSONata expressions...

CVE-2026-12705

creationtimestamp| type| source ---|---|--- 2026-07-17 17:55:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqud3r4mxv2j 2026-07-28 16:51:30+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-07...

CVE-2024-42214

creationtimestamp| type| source ---|---|--- 2026-07-17 17:45:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqucj4shyl2o...

CVE-2026-12694

creationtimestamp| type| source ---|---|--- 2026-07-17 17:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqub4b72eg2r 2026-07-17 19:13:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquhghiz762q 2026-07-19 10:01:00+00:00| seen|...

CVE-2026-49208

Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, when a LiveProp is typed as DateTimeInterface and no explicit format is configured, Symfony\UX\LiveComponent\LiveComponentHydrator::hydrateObjectValue falls back to new $className$value, allowing client-supplied...

CVE-2026-14741

HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parsedate. parsedate matches the date string against a chain of alternative regexes, and str2time delegates to it. Several of these patterns place unbounded quantifiers next to each other before a...

EUVD-2026-45211

Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, when a LiveProp is typed as DateTimeInterface and no explicit format is configured, Symfony\UX\LiveComponent\LiveComponentHydrator::hydrateObjectValue falls back to new $className$value, allowing client-supplied...

CVE-2026-49208

Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, when a LiveProp is typed as DateTimeInterface and no explicit format is configured, Symfony\UX\LiveComponent\LiveComponentHydrator::hydrateObjectValue falls back to new $className$value, allowing client-supplied...

CVE-2026-49208 Symfony UX: Format-less date LiveProps parsed with the permissive DateTime constructor

Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, when a LiveProp is typed as DateTimeInterface and no explicit format is configured, Symfony\UX\LiveComponent\LiveComponentHydrator::hydrateObjectValue falls back to new $className$value, allowing client-supplied...