CVE-2026-54603

creationtimestamp| type| source ---|---|--- 2026-07-28 18:35:08+00:00| published-proof-of-concept| https://github.com/ruby-oauth/oauth2/security/advisories/GHSA-pp92-crg2-gfv9 2026-07-28 20:31:48+00:00| seen| https://gist.github.com/alon710/76a4f64bf3e94be3974678cdc55c68d9...

CVE-2026-54635

creationtimestamp| type| source ---|---|--- 2026-07-28 18:31:38+00:00| seen| https://gist.github.com/alon710/49b30b9938ae88ab2f795a5eb6f5b0cc 2026-07-28 18:35:03+00:00| published-proof-of-concept| https://github.com/nessshon/tonapi/security/advisories/GHSA-3fcr-jvgp-7f58 2026-07-28 19:00:36+00:00...

CVE-2026-47427

creationtimestamp| type| source ---|---|--- 2026-07-28 16:35:07+00:00| published-proof-of-concept| https://github.com/github/github-mcp-server/security/advisories/GHSA-w4q6-qw23-4rg7 2026-07-28 23:12:18+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrqjw7fxsn2l...

GHSA-MFG7-5GFP-C4W3 vulnerabilities

Vulnerabilities for packages: apache-hop, camunda, pinot, spark-kubernetes-operator, management-api-for-apache-cassandra-5.0, camunda-zeebe, request-9047-keycloak-fips, hono, apache-nifi, opensearch, strimzi-kafka-operator-fips, commercial-elasticsearch, kayenta-fips, zipkin, infinispan,...

GHSA-MH99-V99M-4GVG vulnerabilities

Vulnerabilities for packages: rancher-api-ui, sqlpad, opensearch-dashboards, langfuse, pulumi, thingsboard, serve, kubeflow-katib, saf, lerna, npm, nextcloud-server, prism, argo-workflows, ts-patch, renovate...

CGA-6W2Q-49J7-CV62

Bulletin has no description...

GHSA-JVXP-QMX7-GJPX

creationtimestamp| type| source ---|---|--- 2026-07-25 04:31:18+00:00| seen| https://gist.github.com/alon710/5da01f85fee825f05b5c606f0085a6c9...

CVE-2026-62323

creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:05+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-c3jm-gv5r-9wcp...

GHSA-4633-3J49-MH5Q vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

GHSA-HVRM-45R6-MJFJ vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-61632

creationtimestamp| type| source ---|---|--- 2026-07-24 18:35:21+00:00| published-proof-of-concept| https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-9xwg-3r6f-jcx2...

CVE-2026-65900

creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:23+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-gvmj-g25r-r7wr...

CVE-2026-65898

creationtimestamp| type| source ---|---|--- 2026-07-23 14:35:05+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cmwh-pvxp-8882...

CVE-2026-55554

creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:26+00:00| published-proof-of-concept| https://github.com/dompdf/dompdf/security/advisories/GHSA-wvh6-f5jh-8gw4...

GHSA-5GVW-P9QM-JGWH vulnerabilities

Vulnerabilities for packages: apache-tika, apicurio-registry, gradle, tez, jenkins-plugin-manager, keycloak, ruby3.3-jrjackson, zookeeper, scala, infinispan, apache-nifi-registry, confluent-kafka, apache-nifi, sonarqube, keycloak-config-cli, druid, trino, wavefront-proxy, cassandra,...

GHSA-JJJ6-MW9F-P565 vulnerabilities

Vulnerabilities for packages: open-webui, lmcache-cuda-12.8, label-studio, superset, openstack-horizon-2026.1, superset-fips, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2026.1-fips, mlflow, openstack-horizon-2025.2, tensorflow-gpu-jupyter, text-generation-inference,...

CVE-2026-44788

creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:48+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-6c8g-7p36-r338...

CVE-2026-58314

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:23+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-2fcr-jfvc-vgg2...

CVE-2026-58510

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:09+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q423-49rw-g9mh 2026-08-14 12:45:09+00:00| seen| https://www.acn.gov.it/portale/w/gitea-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the UpdatePullRequest function. An attacker can cause unauthorized modifications to private repository branches by exploiting a logic flaw in token scope validation during pull request updates from a publ...