CVE-2026-27638

creationtimestamp| type| source ---|---|--- 2026-02-26 22:04:01+00:00| published-proof-of-concept| https://github.com/actualbudget/actual/security/advisories/GHSA-qmjj-p7m9-wjrv...

GHSA-MPHV-75CG-56WG

creationtimestamp| type| source ---|---|--- 2026-02-25 23:40:19+00:00| seen| https://gist.github.com/alon710/2fdb93ea28abae568076465460152300...

GHSA-JHP4-JVQ3-W5XR

creationtimestamp| type| source ---|---|--- 2026-02-25 19:10:19+00:00| seen| https://gist.github.com/alon710/1b38be1c4bfe28706dfdf76e6aecf149...

GHSA-CVWJ-6C9H-JG6V Parse Dashboard is Missing Authorization for its Agent Endpoint

Impact The AI Agent API endpoint POST /apps/:appId/agent does not enforce authorization. Authenticated users scoped to specific apps can access any other app's agent endpoint by changing the app ID in the URL. Read-only users are given the full master key instead of the read-only master key and c...

GHSA-G3GW-Q23R-PGQM

creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:20+00:00| seen| https://gist.github.com/alon710/3c4ee34d2cdc53cc5dccf62f09e44104...

GHSA-78QV-3MPX-9CQQ

creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:04+00:00| seen| https://gist.github.com/alon710/2374cc8dbd605d3c0e5e8ece442a11db...

GHSA-69X3-G4R3-P962 vulnerabilities

Vulnerabilities for packages: step-ca, step, step-issuer, caddy...

CGA-7F8H-JC5J-QCJP

Bulletin has no description...

CVE-2026-28448

creationtimestamp| type| source ---|---|--- 2026-02-17 21:37:55+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-33rq-m5x2-fvgf...

CVE-2026-28467

creationtimestamp| type| source ---|---|--- 2026-02-17 21:30:48+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-wfp2-v9c7-fh79...

CVE-2026-26992

creationtimestamp| type| source ---|---|--- 2026-02-17 00:35:22+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-93fx-g747-695x...

CVE-2026-26201

creationtimestamp| type| source ---|---|--- 2026-02-14 03:15:16+00:00| published-proof-of-concept| https://github.com/jm33-m0/emp3r0r/security/advisories/GHSA-f5p9-j34q-pwcc...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, bom, melange, gomplate, pulumi, teleport, flux, scorecard, src-fingerprint, witness, zot, skaffold, goreleaser, kargo, gptscript, trivy, guac, kubevela, snyk-cli, tfsec, zarf, pulumi-kubernetes-operator, cerbos, argo-events, syft,...

GHSA-3VQJ-43W4-2Q58 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-VC2W-4V3P-2MQW vulnerabilities

Vulnerabilities for packages: solr...

GHSA-8GRV-JQ2G-CFHW

creationtimestamp| type| source ---|---|--- 2026-02-10 05:10:05+00:00| seen| https://gist.github.com/alon710/041178d8a553aa39851ef0441a5d85f3...

GHSA-C869-JX4C-Q5FC

creationtimestamp| type| source ---|---|--- 2026-02-10 02:40:05+00:00| seen| https://gist.github.com/alon710/fb457bfeef78c9056a7ced2406cd4503...

GHSA-M5R2-8P9X-HP5M

creationtimestamp| type| source ---|---|--- 2026-02-10 00:10:05+00:00| seen| https://gist.github.com/alon710/3866d76e7708105d7c825d24473e3e94...

CVE-2026-25491

creationtimestamp| type| source ---|---|--- 2026-02-09 18:04:34+00:00| published-proof-of-concept| https://github.com/craftcms/cms/security/advisories/GHSA-7pr4-wx9w-mqwr...

CVE-2026-25492

creationtimestamp| type| source ---|---|--- 2026-02-09 18:01:35+00:00| published-proof-of-concept| https://github.com/craftcms/cms/security/advisories/GHSA-96pq-hxpw-rgh8...