GHSA-CVWJ-6C9H-JG6V Parse Dashboard is Missing Authorization for its Agent Endpoint

Impact The AI Agent API endpoint POST /apps/:appId/agent does not enforce authorization. Authenticated users scoped to specific apps can access any other app's agent endpoint by changing the app ID in the URL. Read-only users are given the full master key instead of the read-only master key and c...

GHSA-G3GW-Q23R-PGQM

creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:20+00:00| seen| https://gist.github.com/alon710/3c4ee34d2cdc53cc5dccf62f09e44104...

GHSA-78QV-3MPX-9CQQ

creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:04+00:00| seen| https://gist.github.com/alon710/2374cc8dbd605d3c0e5e8ece442a11db...

GHSA-69X3-G4R3-P962 vulnerabilities

Vulnerabilities for packages: step, caddy, step-ca, step-issuer...

CVE-2026-28448

creationtimestamp| type| source ---|---|--- 2026-02-17 21:37:55+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-33rq-m5x2-fvgf...

CVE-2026-28467

creationtimestamp| type| source ---|---|--- 2026-02-17 21:30:48+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-wfp2-v9c7-fh79...

CVE-2026-26992

creationtimestamp| type| source ---|---|--- 2026-02-17 00:35:22+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-93fx-g747-695x...

CVE-2026-26201

creationtimestamp| type| source ---|---|--- 2026-02-14 03:15:16+00:00| published-proof-of-concept| https://github.com/jm33-m0/emp3r0r/security/advisories/GHSA-f5p9-j34q-pwcc...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: syft, snyk-cli, guac, cerbos, pulumi-language-dotnet, teleport, osv-scanner, src-fingerprint, gitea, kots, melange, xeol, argo-events, nfpm, argo-cd, k9s, flux-image-automation-controller, pulumi, argocd-image-updater, rancher-fleet, zarf, gptscript, gitsign, wolfict...

GHSA-3VQJ-43W4-2Q58 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-VC2W-4V3P-2MQW vulnerabilities

Vulnerabilities for packages: solr...

GHSA-8GRV-JQ2G-CFHW

creationtimestamp| type| source ---|---|--- 2026-02-10 05:10:05+00:00| seen| https://gist.github.com/alon710/041178d8a553aa39851ef0441a5d85f3...

GHSA-C869-JX4C-Q5FC

creationtimestamp| type| source ---|---|--- 2026-02-10 02:40:05+00:00| seen| https://gist.github.com/alon710/fb457bfeef78c9056a7ced2406cd4503...

GHSA-M5R2-8P9X-HP5M

creationtimestamp| type| source ---|---|--- 2026-02-10 00:10:05+00:00| seen| https://gist.github.com/alon710/3866d76e7708105d7c825d24473e3e94...

CVE-2026-25491

creationtimestamp| type| source ---|---|--- 2026-02-09 18:04:34+00:00| published-proof-of-concept| https://github.com/craftcms/cms/security/advisories/GHSA-7pr4-wx9w-mqwr...

CVE-2026-25492

creationtimestamp| type| source ---|---|--- 2026-02-09 18:01:35+00:00| published-proof-of-concept| https://github.com/craftcms/cms/security/advisories/GHSA-96pq-hxpw-rgh8...

GHSA-W67G-2H6V-VJGQ

creationtimestamp| type| source ---|---|--- 2026-02-08 02:40:05+00:00| seen| https://gist.github.com/alon710/77fa3cb54e25b561e55732fa7bee4e36...

GHSA-P6X6-9MX6-26WJ

creationtimestamp| type| source ---|---|--- 2026-02-06 18:10:05+00:00| seen| https://gist.github.com/alon710/4df0dc54735b275488bf3aa51c4b4e68...

CVE-2026-24416

creationtimestamp| type| source ---|---|--- 2026-02-06 16:47:53+00:00| published-proof-of-concept| https://github.com/devcode-it/openstamanager/security/advisories/GHSA-p864-fqgv-92q4...

CVE-2026-25760

creationtimestamp| type| source ---|---|--- 2026-02-05 21:01:55+00:00| published-proof-of-concept| https://github.com/BishopFox/sliver/security/advisories/GHSA-2286-hxv5-cmp2...