CVE-2026-54603

creationtimestamp| type| source ---|---|--- 2026-07-28 18:35:08+00:00| published-proof-of-concept| https://github.com/ruby-oauth/oauth2/security/advisories/GHSA-pp92-crg2-gfv9 2026-07-28 20:31:48+00:00| seen| https://gist.github.com/alon710/76a4f64bf3e94be3974678cdc55c68d9...

CVE-2026-54635

creationtimestamp| type| source ---|---|--- 2026-07-28 18:31:38+00:00| seen| https://gist.github.com/alon710/49b30b9938ae88ab2f795a5eb6f5b0cc 2026-07-28 18:35:03+00:00| published-proof-of-concept| https://github.com/nessshon/tonapi/security/advisories/GHSA-3fcr-jvgp-7f58 2026-07-28 19:00:36+00:00...

CVE-2026-47427

creationtimestamp| type| source ---|---|--- 2026-07-28 16:35:07+00:00| published-proof-of-concept| https://github.com/github/github-mcp-server/security/advisories/GHSA-w4q6-qw23-4rg7 2026-07-28 23:12:18+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrqjw7fxsn2l...

GHSA-MFG7-5GFP-C4W3 vulnerabilities

Vulnerabilities for packages: floci, strimzi-kafka-operator-fips, keycloak-fips, seata, tinkerpop, hadoop-fips, apache-hop-fips, kafka-bridge, knative-kafka-broker, s3proxy-fips, spark-kubernetes-operator-fips, opensearch-fips, camunda-zeebe, s3proxy, traccar-fips, apache-nifi, elasticsearch-fips...

GHSA-MH99-V99M-4GVG vulnerabilities

Vulnerabilities for packages: renovate, langfuse, serve, nextcloud-server, kubeflow-katib, prism, thingsboard, rancher-api-ui, sqlpad, lerna, pulumi, ts-patch, npm, argo-workflows, opensearch-dashboards, saf...

CGA-6W2Q-49J7-CV62

Bulletin has no description...

GHSA-JVXP-QMX7-GJPX

creationtimestamp| type| source ---|---|--- 2026-07-25 04:31:18+00:00| seen| https://gist.github.com/alon710/5da01f85fee825f05b5c606f0085a6c9...

CVE-2026-62323

creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:05+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-c3jm-gv5r-9wcp...

GHSA-HVRM-45R6-MJFJ vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-4633-3J49-MH5Q vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

CVE-2026-61632

creationtimestamp| type| source ---|---|--- 2026-07-24 18:35:21+00:00| published-proof-of-concept| https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-9xwg-3r6f-jcx2...

CVE-2026-65900

creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:23+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-gvmj-g25r-r7wr...

CVE-2026-65898

creationtimestamp| type| source ---|---|--- 2026-07-23 14:35:05+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cmwh-pvxp-8882...

CVE-2026-55554

creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:26+00:00| published-proof-of-concept| https://github.com/dompdf/dompdf/security/advisories/GHSA-wvh6-f5jh-8gw4...

GHSA-5GVW-P9QM-JGWH vulnerabilities

Vulnerabilities for packages: logstash, apache-tika, trino, confluent-kafka, spark, keycloak-config-cli, akhq, strimzi-kafka-operator, wavefront-proxy, zookeeper, druid, ruby3.3-jrjackson, ruby3.2-jrjackson, gradle, apache-nifi, opensearch, thingsboard, sonarqube, jenkins-plugin-manager, flyway,...

GHSA-JJJ6-MW9F-P565 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.2, superset-fips, mlflow, tensorflow-gpu-jupyter, openstack-horizon-2026.1-fips, text-generation-inference, tritonserver-backend-vllm-cuda-13.0, open-webui, superset, openstack-horizon-2026.1, label-studio, openstack-horizon-2025.2-fips,...

CVE-2026-44788

creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:48+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-6c8g-7p36-r338...

CVE-2026-58314

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:23+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-2fcr-jfvc-vgg2...

CVE-2026-58510

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:09+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q423-49rw-g9mh 2026-08-14 12:45:09+00:00| seen| https://www.acn.gov.it/portale/w/gitea-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the UpdatePullRequest function. An attacker can cause unauthorized modifications to private repository branches by exploiting a logic flaw in token scope validation during pull request updates from a publ...