CVE-2026-13459

creationtimestamp| type| source ---|---|--- 2026-07-02 22:17:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2r4ufnl2d 2026-07-03 03:24:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpplvcmmnk2o...

CVE-2026-59099

creationtimestamp| type| source ---|---|--- 2026-07-02 22:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpozsoeoil2t 2026-07-03 00:08:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppaxex7xh24 2026-07-03 15:09:49+00:00| seen|...

CVE-2026-59097

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. Attackers can supply an arbitrary...

Regular Expression Denial of Service (ReDoS)

Overview org.webjars.npm:jsonata is a JSON query and transformation language Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the $toMillis function. An attacker can cause resource exhaustion by providing specially crafted inputs that trigger...

CVE-2026-59097

Taiga (software) prior to version 6.10.2 contains a missing authorization vulnerability that lets unauthenticated remote attackers create default due-date records in any project by abusing unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. An arbitrary project id...

CVE-2026-59097

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. Attackers can supply an arbitrary...

CVE-2026-59097 Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. Attackers can supply an arbitrary...

EUVD-2026-41428

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. Attackers can supply an arbitrary...

CVE-2026-59097 Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. Attackers can supply an arbitrary...

CVE-2026-50192

creationtimestamp| type| source ---|---|--- 2026-07-02 18:35:11+00:00| published-proof-of-concept| https://github.com/kerberos-io/agent/security/advisories/GHSA-h5gx-45rj-2h5j...

CVE-2026-50746

creationtimestamp| type| source ---|---|--- 2026-07-02 18:21:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mponk2wkp327 2026-07-03 21:35:47+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpriumewrl2b 2026-07-07 13:30:26+00:00| seen|...

CVE-2026-38057

creationtimestamp| type| source ---|---|--- 2026-07-02 17:15:11+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01 2026-07-10 21:54:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd56jbznv2f 2026-07-12 11:00:54+00:00| seen|...

CVE-2026-13768

creationtimestamp| type| source ---|---|--- 2026-07-02 17:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-03 2026-07-03 00:00:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116853102484273046 2026-07-03 00:00:46+00:00| seen|...

CVE-2026-55112

creationtimestamp| type| source ---|---|--- 2026-07-02 17:02:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpoj52seyz2v 2026-07-02 18:34:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpooaqbvzg2h 2026-07-03 07:16:31+00:00| seen|...

CVE-2026-58455

creationtimestamp| type| source ---|---|--- 2026-07-02 17:01:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpoj2vvyxr2v 2026-07-02 19:01:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoprdjawj2u 2026-07-03 07:26:43+00:00| seen|...

GHSA-3P4H-7M6X-2HCM

creationtimestamp| type| source ---|---|--- 2026-07-02 16:42:57+00:00| seen| https://gist.github.com/konard/2d84a73c0ff6413bca5b0e79fa90d50e 2026-07-03 13:46:19+00:00| seen| https://gist.github.com/konard/21e8411dcc1ecc12ae0a937b657f93ae 2026-07-03 14:16:44+00:00| seen|...

CVE-2026-54764

creationtimestamp| type| source ---|---|--- 2026-07-02 13:55:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6o6mhfq2e...

CVE-2026-49089

creationtimestamp| type| source ---|---|--- 2026-07-02 13:50:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6flfadf2t...

CVE-2026-55661

creationtimestamp| type| source ---|---|--- 2026-07-02 13:02:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo3pvobly2u...

CVE-2026-57764

creationtimestamp| type| source ---|---|--- 2026-07-02 12:17:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnz7vqjr52m 2026-07-02 13:44:05+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpo625wqws2j 2026-07-03 00:45:22+00:00| seen|...