ROOT-APP-PYPI-GHSA-X284-J5P8-9C5P GHSA-x284-j5p8-9c5p in pypdf - Patched by Root

Root has patched GHSA-x284-j5p8-9c5p in the pypdf package for Root:PyPI. Multiple fixed versions available...

CGA-5JV8-2R2W-W96F

Bulletin has no description...

CGA-4HQ2-XFH8-48P2

Bulletin has no description...

CGA-3WRW-J3V8-82P9

Bulletin has no description...

GO-2024-3310 vulnerabilities

Vulnerabilities for packages: gh...

GO-2026-4569 vulnerabilities

Vulnerabilities for packages: osv-scanner, github-mcp-server, opencost, ferretdb, datadog-agent, gptscript, jaeger...

GHSA-J8XF-5FW2-F99Q

creationtimestamp| type| source ---|---|--- 2026-08-13 22:43:46+00:00| seen| https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da...

GHSA-MXCG-P696-RM94

creationtimestamp| type| source ---|---|--- 2026-08-13 22:43:46+00:00| seen| https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da...

GHSA-RM3M-9MVW-68FH

creationtimestamp| type| source ---|---|--- 2026-08-13 22:43:46+00:00| seen| https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da...

GHSA-P28V-F755-9QRG

creationtimestamp| type| source ---|---|--- 2026-08-13 21:32:39+00:00| seen| https://gist.github.com/alon710/9ad8f19dc4256e5aad5d6b3105b603da...

CVE-2026-73561

creationtimestamp| type| source ---|---|--- 2026-08-13 18:35:18+00:00| published-proof-of-concept| https://github.com/anephenix/hub/security/advisories/GHSA-g5vv-q72c-7j78...

GHSA-48P8-G2FX-3WWM

creationtimestamp| type| source ---|---|--- 2026-08-13 17:32:46+00:00| seen| https://gist.github.com/alon710/ee760ed8dd4e3944f68b62f514473cdc...

CVE-2026-58443

Public-only repository tokens can update private PR head branches...

CVE-2026-58440

Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content incomplete revocation cleanup in DeleteCollaboration...

CVE-2026-58416

Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard...

CVE-2026-56443

Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...

CVE-2026-24059

The GET /api/v1/user/actions/runners/registration-token endpoint and its owner- and repository-level equivalents creates a new runner registration token if none exists, yet the API scope middleware classifies it as read-only because it is a GET request. A holder of a leaked read:user-scoped token...

EUVD-2026-58128

The GET /api/v1/user/actions/runners/registration-token endpoint and its owner- and repository-level equivalents creates a new runner registration token if none exists, yet the API scope middleware classifies it as read-only because it is a GET request. A holder of a leaked read:user-scoped token...

CVE-2026-58510 GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private

GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public-private...

CVE-2026-58510

The Gitea platform is affected by a vulnerability where the ClearRepoWatches fix was not applied to the API EditRepo path. This issue occurs because a sister code path retains stale watches when a repository's visibility is changed from public to private . This exposure of sensitive information t...