GHSA-6RXQ-Q92G-4RMF

creationtimestamp| type| source ---|---|--- 2026-03-01 05:40:22+00:00| seen| https://gist.github.com/alon710/7a893e251a88058a62af629d6e1695c0...

CVE-2026-28507

creationtimestamp| type| source ---|---|--- 2026-03-01 04:30:31+00:00| published-proof-of-concept| https://github.com/idno/idno/security/advisories/GHSA-37j7-56xc-c468 2026-03-06 05:58:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgemyxfnxq2e...

GHSA-PFJF-5GXR-995X

creationtimestamp| type| source ---|---|--- 2026-03-01 04:10:22+00:00| seen| https://gist.github.com/alon710/794157ac4402be5b97d405f38441e2cb...

GHSA-RFPP-2HGM-GP5V Indico has a missing access check in the event series management API

Impact The API endpoint used to manage event series is missing an access check, allowing unauthenticated/unauthorized access to this endpoint. The impact of this is limited to: - Getting the metadata title, category chain, start/end date for events in an existing series - Deleting an existing eve...

Indico has a missing access check in the event series management API

Impact The API endpoint used to manage event series is missing an access check, allowing unauthenticated/unauthorized access to this endpoint. The impact of this is limited to: - Getting the metadata title, category chain, start/end date for events in an existing series - Deleting an existing eve...

CVE-2026-28561

creationtimestamp| type| source ---|---|--- 2026-03-01 00:12:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfxhej34ew27...

CVE-2026-28280

creationtimestamp| type| source ---|---|--- 2026-02-28 02:40:11+00:00| seen| https://gist.github.com/alon710/b64eb8bf5447813639656d54741fea24 2026-02-28 02:55:04+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mfv7xisgyv2b...

Missing Authentication for Critical Function

Overview indico is a conference lifecycle management and meeting/lecture scheduling tool. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the event series management API endpoint. An attacker can retrieve event metadata, delete, or modify event...

GHSA-RW9X-PXQX-Q789

creationtimestamp| type| source ---|---|--- 2026-02-28 00:10:11+00:00| seen| https://gist.github.com/alon710/ec22814fdc2305d798b5b3216cff5a34...

CVE-2019-25460

creationtimestamp| type| source ---|---|--- 2026-02-27 21:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfunansqic2x...

PYSEC-2026-2183

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In versions prior to 3.3.11, the API endpoint used to manage event series is missing an access check, allowing unauthenticated/unauthorized access to this endpoint. The impact of this ...

CVE-2026-28352

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In versions prior to 3.3.11, the API endpoint used to manage event series is missing an access check, allowing unauthenticated/unauthorized access to this endpoint. The impact of this ...

CVE-2026-28352 Indico missing access check in event series management API

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In versions prior to 3.3.11, the API endpoint used to manage event series is missing an access check, allowing unauthenticated/unauthorized access to this endpoint. The impact of this ...

EUVD-2026-9071

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In versions prior to 3.3.11, the API endpoint used to manage event series is missing an access check, allowing unauthenticated/unauthorized access to this endpoint. The impact of this ...

CVE-2026-2293

creationtimestamp| type| source ---|---|--- 2026-02-27 16:52:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfu6cwsqc52n 2026-03-02 15:10:31+00:00| seen| https://gist.github.com/alon710/a438186439b16d85108c54db004c595a...

CVE-2026-1305

creationtimestamp| type| source ---|---|--- 2026-02-27 13:33:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mftt6mhvk22d...

SUSE-SU-2026:0683-1 Security update for freerdp2

This update for freerdp2 fixes the following issues: - CVE-2026-22855: heap-buffer-overflow in smartcardunpacksetattribcall bsc1256721. - CVE-2026-22857: heap-use-after-free in irpthreadfunc bsc1256723. - CVE-2026-23533: improper validation can lead to heap buffer overflow in...

EUVD-2025-208132

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible EDA Event Stream API. This vulnerability allows exposure of sensitive client credentials and internal infrastructure headers via the testheaders field when an event stream is in test mode. The possible outcome...

EUVD-2025-208133

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible EDA Event Streams. This vulnerability allows an authenticated user to gain access to sensitive internal infrastructure headers such as X-Trusted-Proxy and X-Envoy- and event stream URLs via crafted requests and job...

CVE-2025-9908

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible EDA Event Streams. This vulnerability allows an authenticated user to gain access to sensitive internal infrastructure headers such as X-Trusted-Proxy and X-Envoy- and event stream URLs via crafted requests and job...