CVE-2026-45770

creationtimestamp| type| source ---|---|--- 2026-05-20 14:15:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3qtiaud2c...

CVE-2026-45767

creationtimestamp| type| source ---|---|--- 2026-05-20 14:15:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3qtiaud2c...

Malicious code in @limebike/supreme-date-pickers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c82e94fac384ea6891e5aea99635ab429663e321502acbbc9eaaf81864e0d5e On npm install, both preinstall and postinstall hooks execute index.js, which collects the installer's hostname, all non-internal network interface I...

MAL-2026-4190 Malicious code in @limebike/supreme-date-pickers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c82e94fac384ea6891e5aea99635ab429663e321502acbbc9eaaf81864e0d5e On npm install, both preinstall and postinstall hooks execute index.js, which collects the installer's hostname, all non-internal network interface I...

GHSA-RG75-Q538-X34V

creationtimestamp| type| source ---|---|--- 2026-05-20 11:20:50+00:00| seen| https://gist.github.com/alon710/261ffaf79cb2412380434d62f37902b8...

CVE-2026-47068

creationtimestamp| type| source ---|---|--- 2026-05-20 11:02:29+00:00| published-proof-of-concept| https://github.com/phenixdigital/phoenixstorybook/security/advisories/GHSA-mrhx-6pw9-q5fh 2026-05-20 15:28:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmc7sv2h5b2h 2026-06-09...

CVE-2026-45064

creationtimestamp| type| source ---|---|--- 2026-05-20 10:57:17+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbqofftwz2n 2026-05-20 11:59:01+00:00| seen| https://bsky.app/profile/mradcliffe.nokoto.org.ap.brid.gy/post/3mmbu4igtlyo2 2026-07-14 19:59:43+00:00| seen|...

CVE-2026-46639

creationtimestamp| type| source ---|---|--- 2026-05-20 10:31:59+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbpb53e6r2y...

CVE-2026-46629

creationtimestamp| type| source ---|---|--- 2026-05-20 10:31:16+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbp7unvxr2b...

CVE-2026-46633

creationtimestamp| type| source ---|---|--- 2026-05-20 10:30:57+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbp77j3sk2h 2026-06-06 23:55:29+00:00| seen| https://gist.github.com/vladko312/39507beaa58eacf3b62e6a6e6cd69128 2026-06-20 13:22:38+00:00| seen|...

CVE-2026-24209

creationtimestamp| type| source ---|---|--- 2026-05-20 07:11:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbe272t6k2r...

CVE-2026-24208

creationtimestamp| type| source ---|---|--- 2026-05-20 06:34:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbbxzouak2i...

Astra Linux – Vulnerability in Thunderbird

An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email’s date will be displayed. If the dates are different, then Thunderbird does not report the email as having an invalid signature. I...

Astra Linux – Vulnerability in FontForge

Splinefont in FontForge, with a version number of 20230101, allows for command injection via crafted filenames...

Astra Linux – Vulnerability in jqueryui

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField option from untrusted sources might execute untrusted code. This issue has been fixed in jQuery UI 1.13.0. Any string value passed to the altField option is now treated as a CSS...

Astra Linux – Vulnerability in Ruby 2.5

In the date gem for Ruby, from version 3.2.0 onwards, Date.parse can cause ReDoS Regular Expression Denial of Service attacks due to the use of a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

Astra Linux – Vulnerability in node-moment

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Versions of moment that were affected use an inefficient parsing algorithm. Specifically, the string-to-date parsing method used by moment more precisely, the rfc2822 parsing method, which is used by...

Astra Linux – Vulnerability in libusrsctp

The usrsctp before December 20, 2019, has out-of-bounds reads in sctploadaddressesfrominit...

Astra Linux – Vulnerability in jqueryui

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various Text options of the Datepicker widget from untrusted sources might execute untrusted code. This issue has been fixed in jQuery UI 1.13.0. The values passed to various Text options are...

Astra Linux – Vulnerability in Thunderbird

The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time. If this information is present, Thunderbird does not compare the signature creation date with the message date and time, and displays a valid signature even if there is a mismatch...