CRLF Injection

Overview Affected versions of this package are vulnerable to CRLF Injection via the parseheader process. An attacker can inject arbitrary carriage return and line feed characters into HTTP headers by sending specially crafted percent-encoded values, potentially leading to response splitting or...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via host resolution in the CLI authentication layer. An attacker can obtain authentication tokens intended for GitHub or GitHub Enterprise by causing authenticated requests to be sent to external hosts, as the ho...

CVE-2026-45741

creationtimestamp| type| source ---|---|--- 2026-05-29 16:14:35+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-86m8-88fq-xfxp...

CVE-2026-44829

creationtimestamp| type| source ---|---|--- 2026-05-29 16:12:53+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-hwc4-gmrw-5222...

CVE-2026-44492

creationtimestamp| type| source ---|---|--- 2026-05-29 06:32:41+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv 2026-06-11 18:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnzsmajacl2n 2026-06-12 12:00:59+00:0...

CVE-2026-50287

creationtimestamp| type| source ---|---|--- 2026-05-29 02:43:29+00:00| published-proof-of-concept| https://github.com/agenticmail/agenticmail/security/advisories/GHSA-63gr-g7jc-v8rg...

CVE-2026-42563

creationtimestamp| type| source ---|---|--- 2026-05-28 21:43:22+00:00| published-proof-of-concept| https://github.com/jelmer/dulwich/security/advisories/GHSA-9277-mp7x-85jf 2026-08-11 09:43:37+00:00| seen| https://gist.github.com/hayageek/05ef86a8272d03ab9e54ab5476cf7afe...

Access Control Bypass

Overview pycti is a Python API client for OpenCTI. Affected versions of this package are vulnerable to Access Control Bypass via the userEdit process in the graphQL API. An attacker can gain unauthorized access to sensitive information and perform actions with elevated privileges by adding a user...

CVE-2026-46345

creationtimestamp| type| source ---|---|--- 2026-05-28 17:44:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-4q5v-7g7x-j79w 2026-08-26 00:34:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ar4qbv6h6ay2d 2026-09-24 21:03:07+00:00| seen|...

GHSA-7RQH-FGFV-43Q2 vulnerabilities

Vulnerabilities for packages: chromium...

CGA-6C78-JP97-5CXC

Bulletin has no description...

CVE-2026-46380

creationtimestamp| type| source ---|---|--- 2026-05-27 11:42:06+00:00| published-proof-of-concept| https://github.com/oscal-compass/compliance-trestle/security/advisories/GHSA-w76h-q7c6-jpjp...

CVE-2026-45774

creationtimestamp| type| source ---|---|--- 2026-05-27 11:39:59+00:00| published-proof-of-concept| https://github.com/oscal-compass/compliance-trestle/security/advisories/GHSA-mj4x-vf5c-5xg8...

CVE-2026-25879

creationtimestamp| type| source ---|---|--- 2026-05-27 00:56:21+00:00| published-proof-of-concept| https://github.com/langroid/langroid/security/advisories/GHSA-mxfr-6hcw-j9rq 2026-06-02 01:02:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnbfibhj362a 2026-07-09...

GHSA-Q8MJ-M7CP-5Q26 vulnerabilities

Vulnerabilities for packages: saf, prism, thingsboard, kubeflow-pipelines, argo-workflows, py3-jupyterlab, code-server, opensearch-dashboards, sqlpad, json-server, kubeflow-katib, renovate, langfuse, tileserver-gl, kubeflow-centraldashboard...

CVE-2026-45162

creationtimestamp| type| source ---|---|--- 2026-05-26 14:09:06+00:00| published-proof-of-concept| https://github.com/pimcore/pimcore/security/advisories/GHSA-36fc-7wjg-mfvj 2026-07-18 20:00:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqx2jeapih2w...

CVE-2026-49396

creationtimestamp| type| source ---|---|--- 2026-05-26 07:31:03+00:00| published-proof-of-concept| https://github.com/nezhahq/nezha/security/advisories/GHSA-8qhj-4f8c-j8qg...

CVE-2026-47231

creationtimestamp| type| source ---|---|--- 2026-05-25 08:46:04+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-x628-457g-2pw9 2026-08-12 15:34:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2tsmvj5hdjmwn...

CVE-2026-47230

creationtimestamp| type| source ---|---|--- 2026-05-25 08:45:49+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-q6w3-hpfv-rg36 2026-08-12 15:40:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6e3gk3aqb777g...

CVE-2026-47232

creationtimestamp| type| source ---|---|--- 2026-05-25 08:45:09+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-4rgq-38mh-9xqg 2026-08-12 15:28:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5fxxz3gzce2tb...