CVE-2026-4995 wandb OpenUI Window Message Event index.html cross site scripting

A vulnerability was determined in wandb OpenUI up to 1.0. Affected by this vulnerability is an unknown functionality of the file frontend/public/annotator/index.html of the component Window Message Event Handler. This manipulation causes cross site scripting. The attack can be initiated remotely...

CVE-2026-4995

wandb OpenUI up to version 1.0 is affected. The vulnerability targets the Window Message Event Handler in frontend/public/annotator/index.html, enabling cross-site scripting. Exploitation can be performed remotely, and the exploit has been publicly disclosed. The vendor was contacted early but di...

CVE-2026-4995 wandb OpenUI Window Message Event index.html cross site scripting

A vulnerability was determined in wandb OpenUI up to 1.0. Affected by this vulnerability is an unknown functionality of the file frontend/public/annotator/index.html of the component Window Message Event Handler. This manipulation causes cross site scripting. The attack can be initiated remotely...

GHSA-QX3G-5G22-FQ5W

creationtimestamp| type| source ---|---|--- 2026-03-28 01:18:50+00:00| seen| Telegram/DQ8Phmkx05Q1rHpnB8sJ1vhC9dSxcFzzTf0RtJAOAn3w7JQ...

GHSA-6Q6H-J7HJ-3R64

creationtimestamp| type| source ---|---|--- 2026-03-27 23:28:21+00:00| seen| Telegram/rRTxpaJmTYQmE8Q4CNoqCv49oiBv1g4u8JDlKqXnTcwR7sk...

GHSA-QVQR-5CV7-WH35

creationtimestamp| type| source ---|---|--- 2026-03-27 23:28:21+00:00| seen| Telegram/rRTxpaJmTYQmE8Q4CNoqCv49oiBv1g4u8JDlKqXnTcwR7sk...

GHSA-PPP5-5V6C-4JWP

creationtimestamp| type| source ---|---|--- 2026-03-27 23:27:55+00:00| seen| Telegram/9UoOcMml4hO1LPqEQWig8KjS1ZNRBXJeCq-u3-UaU0LNh0...

CVE-2026-33632

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 4.2.4, two file operation event types — ESEVENTTYPEAUTHEXCHANGEDATA and ESEVENTTYPEAUTHCLONE — were not intercepted by ClearanceKit's opfilter system extension, allowing local...

GHSA-GH5M-4M97-C95H

creationtimestamp| type| source ---|---|--- 2026-03-27 21:23:25+00:00| published-proof-of-concept| Telegram/wWPS0byCXjzJleEHKN6yjldptusIbQ1L7WvvuLFtEg9AE-Q 2026-03-28 03:35:16+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mi3pb7a74u2q...

CVE-2026-34374

creationtimestamp| type| source ---|---|--- 2026-03-27 21:22:34+00:00| seen| Telegram/HCzuKY5MuLPsfoEI5S3ks6iQFEX7xEFL0kHnLhrHZ36Sb0 2026-03-27 22:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi34ln6ygj25 2026-03-27 22:01:45+00:00| seen|...

CVE-2026-30576

creationtimestamp| type| source ---|---|--- 2026-03-27 19:04:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2sqlwdjr2s...

curl: Unbounded GZIP Decompression Leading to Event-Loop Starvation

When libcurl is configured to decompress HTTP responses via CURLOPTACCEPTENCODING or the --compressed CLI flag, it lacks decompression bounds checking or a mechanism to yield execution during massive expansion tasks. If an attacker provides a highly compressed payload zip bomb, libcurl's underlyi...

CVE-2026-34381

creationtimestamp| type| source ---|---|--- 2026-03-27 17:29:42+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-7fh7-8xqm-3g88 2026-03-31 23:20:06+00:00| published-proof-of-concept| Telegram/nmybyhyW9j--U7tziXdh4Y31RLU4faF2Hhhi6Dlcxk1tj2s 2026-04-01...

CVE-2026-26074

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to possible std::map corruption. The trigger is CSMS GetLog/UpdateFirmware request network with an EVSE fault event physical. This results in TSAN reports concurrent access data race to eventqueue...

Security Bulletin: Multiple vulnerabilities in IBM Event Endpoint Management.

Summary Multiple vulnerabilities were addressed in IBM Event Endpoint Management 11.7.3 Vulnerability Details CVEID:CVE-2025-68470 DESCRIPTION: React Router is a router for React. In versions 6.0.0 through 6.30.1 and 7.0.0 through 7.9.5, an attacker-supplied path can be crafted so that when a Rea...

CVE-2026-4621

creationtimestamp| type| source ---|---|--- 2026-03-27 16:14:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2jab2g4j2t 2026-04-02 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN89339669/...

CVE-2025-66578

creationtimestamp| type| source ---|---|--- 2026-03-27 15:20:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mi2g6nrkpj25...

GHSA-6FQ7-PGJ3-6CFP

creationtimestamp| type| source ---|---|--- 2026-03-27 15:17:36+00:00| seen| Telegram/LBnoZEkIgYZcAalPkuHtbpp5d2DNhQfVZICyQCgDXFXXQ...

CVE-2026-27855

creationtimestamp| type| source ---|---|--- 2026-03-27 12:27:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi24kkl3wz24...

CVE-2026-33433

creationtimestamp| type| source ---|---|--- 2026-03-27 10:29:14+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-qr99-7898-vr7c 2026-03-27 15:20:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mi2g6xmnl22z 2026-04-03 19:24:00+00:00|...