GHSA-R8F8-4PGH-4M8V vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-50230

creationtimestamp| type| source ---|---|--- 2026-06-12 02:49:16+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-50230.yaml...

GHSA-68C4-77CF-437J vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-855R-9WVC-25GH vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-7X6F-897Q-8H7J vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-JMPJ-8P4W-J5RQ vulnerabilities

Vulnerabilities for packages: chromium...

OPENSUSE-SU-2026:11011-1 golang-github-prometheus-alertmanager-0.32.2-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-alertmanager-0.32.2-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-33760

creationtimestamp| type| source ---|---|--- 2026-06-11 19:53:35+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-9c59-2mvc-vfr8 2026-07-01 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpld4xhnma2e...

GHSA-GXHG-7JX8-M22J vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-F5VX-F6JP-89J6 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-3VRV-754Q-MQ3J vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-48547

KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the version or changes fields of patchNotesData.json, which are interpolated unsanitized into a childprocess.execSync cal...

CVE-2026-54015

creationtimestamp| type| source ---|---|--- 2026-06-11 19:05:34+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-4r4w-2wgp-w7cj...

CVE-2026-54014

creationtimestamp| type| source ---|---|--- 2026-06-11 19:04:46+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-j2c8-v969-8r5c...

CVE-2026-54013

creationtimestamp| type| source ---|---|--- 2026-06-11 19:02:12+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-v2qm-5wxj-qhj7...

CVE-2026-54010

creationtimestamp| type| source ---|---|--- 2026-06-11 18:57:21+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-vrhc-3fr6-pc3c 2026-07-18 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqwsjmkf4t2m...

EUVD-2026-36284

KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the version or changes fields of patchNotesData.json, which are interpolated unsanitized into a childprocess.execSync cal...

CVE-2026-48547 KanaDojo < 0.1.18 Command Injection via patchNotesData.json in release.yml

KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the version or changes fields of patchNotesData.json, which are interpolated unsanitized into a childprocess.execSync cal...

CVE-2026-48547 KanaDojo < 0.1.18 Command Injection via patchNotesData.json in release.yml

KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the version or changes fields of patchNotesData.json, which are interpolated unsanitized into a childprocess.execSync cal...

CVE-2026-48546

KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting the explicit passing of the global require function into a Node.js vm.runInNewContext sandbox context in the issue-auto-respond.yml workflow. Attackers can submit a pull...