GHSA-V6W6-338P-P256

creationtimestamp| type| source ---|---|--- 2026-04-06 23:22:01+00:00| seen| Telegram/baQtFgKM2b993Xinx1K-rl9rafgMn1ApK9JhHyMaH5eo0M...

GHSA-7PJ2-232X-6698

creationtimestamp| type| source ---|---|--- 2026-04-06 23:22:01+00:00| seen| Telegram/baQtFgKM2b993Xinx1K-rl9rafgMn1ApK9JhHyMaH5eo0M...

Improper Control of a Resource Through its Lifetime

Overview pocketmine/pocketmine-mp is a highly customisable, open source server software for Minecraft: Bedrock Edition written in PHP Affected versions of this package are vulnerable to Improper Control of a Resource Through its Lifetime in the process handling entity state transitions. An attack...

CVE-2024-48783

creationtimestamp| type| source ---|---|--- 2026-04-06 20:51:48+00:00| seen| https://bsky.app/profile/allsafeus.bsky.social/post/3miu5ewvcf22q...

GHSA-2J4Q-6P52-4RHW

creationtimestamp| type| source ---|---|--- 2026-04-06 19:29:44+00:00| seen| Telegram/RmP7l-K41x9UoCBscD5W8eizA4yDJaPJqAKKOeWwXNyu-8...

GHSA-JG96-P5P6-Q3CV

creationtimestamp| type| source ---|---|--- 2026-04-06 19:29:44+00:00| seen| Telegram/RmP7l-K41x9UoCBscD5W8eizA4yDJaPJqAKKOeWwXNyu-8...

GHSA-CQGF-F4X7-G6WC

creationtimestamp| type| source ---|---|--- 2026-04-06 19:29:09+00:00| seen| Telegram/t1F-Vxaulmn07lvg5ppSTSOssGvqtwkUpkkBVUVRjFPlk...

GHSA-HM7R-C7QW-GHP6

creationtimestamp| type| source ---|---|--- 2026-04-06 19:29:09+00:00| seen| Telegram/t1F-Vxaulmn07lvg5ppSTSOssGvqtwkUpkkBVUVRjFPlk...

GHSA-79C4-CVV7-4QM3

creationtimestamp| type| source ---|---|--- 2026-04-06 19:28:12+00:00| published-proof-of-concept| Telegram/FD1XDPHxmeq4cPhZAsKic1sVLDUHGuIRMXt4NvJcjYqn2U...

CVE-2026-5668

creationtimestamp| type| source ---|---|--- 2026-04-06 19:04:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitxewiwuz2j...

Allocation of Resources Without Limits or Throttling

Overview strawberry-graphql is an A library for creating GraphQL APIs Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the WebSocket subscription handling process. An attacker can exhaust server resources by sending a large number of...

GHSA-36XV-JGW5-4Q75 @nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')

Impact What kind of vulnerability is it? Who is impacted? SseStream.transform interpolates message.type and message.id directly into Server-Sent Events text protocol output without sanitizing newline characters \r, \n. Since the SSE protocol treats both \r and \n as field delimiters and \n\n as...

@nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')

Impact What kind of vulnerability is it? Who is impacted? SseStream.transform interpolates message.type and message.id directly into Server-Sent Events text protocol output without sanitizing newline characters \r, \n. Since the SSE protocol treats both \r and \n as field delimiters and \n\n as...

GHSA-588R-CR5C-W6HF

creationtimestamp| type| source ---|---|--- 2026-04-06 17:32:59+00:00| seen| Telegram/Nu9QDXzNbve1iNgaEifpWzTHqsZ9MAX7l9lhuN92ZYucbK4...

CVE-2026-5665

creationtimestamp| type| source ---|---|--- 2026-04-06 17:32:59+00:00| seen| Telegram/Nu9QDXzNbve1iNgaEifpWzTHqsZ9MAX7l9lhuN92ZYucbK4...

GHSA-2GG9-6P7W-6CPJ

creationtimestamp| type| source ---|---|--- 2026-04-06 17:32:38+00:00| seen| Telegram/n5Nok-XlRHEre5O89LvYLplT02rw8wZYprnGR4USXlLgM...

BIT-PARSE-2026-34573 Parse Server: GraphQL complexity validator exponential fragment traversal DoS

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.68 and 9.7.0, the GraphQL query complexity validator can be exploited to cause a denial-of-service by sending a crafted query with binary fan-out fragment spreads. A singl...

CVE-2026-5633

creationtimestamp| type| source ---|---|--- 2026-04-06 09:16:06+00:00| published-proof-of-concept| Telegram/5ijLrALAuqXYdoOjryiznkXUmcGfws-2xPX0cuo3yo2hM 2026-04-06 10:25:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mit2ei7eqg2o...

CVE-2024-47637

creationtimestamp| type| source ---|---|--- 2026-04-06 09:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3misvmlenyp2f...

PT-2026-30760

Name of the Vulnerable Software and Affected Versions Nest versions prior to 11.1.18 Description The SseStream. transform function interpolates message.type and message.id directly into Server-Sent Events text protocol output without sanitizing newline characters r, . Because the SSE protocol use...