CVE-2026-1721

creationtimestamp| type| source ---|---|--- 2026-02-14 20:10:24+00:00| seen| https://gist.github.com/alon710/4a05fc141b95fe55d99c8d4280da70ac 2026-02-14 20:25:04+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3metu46houi2u...

CVE-2026-22892

creationtimestamp| type| source ---|---|--- 2026-02-14 19:40:27+00:00| seen| https://gist.github.com/alon710/d06bb6ea8a46910fb2bfdaafee30c81f 2026-02-14 19:55:35+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3metshhj2462a 2026-02-15 09:03:22+00:00| seen|...

CVE-2026-26201

creationtimestamp| type| source ---|---|--- 2026-02-14 03:15:16+00:00| published-proof-of-concept| https://github.com/jm33-m0/emp3r0r/security/advisories/GHSA-f5p9-j34q-pwcc...

GHSA-WJ8P-JJ64-H7FF

creationtimestamp| type| source ---|---|--- 2026-02-13 12:40:08+00:00| seen| https://gist.github.com/alon710/3d1e0c676fd161e289838724b2e46b8f...

Security Updates for Microsoft Visual Studio Products (February 2026)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio allows an unauthorized attacker to execu...

GHSA-435G-FCV3-8J26

creationtimestamp| type| source ---|---|--- 2026-02-12 23:10:24+00:00| seen| https://gist.github.com/alon710/b39938f3d43a4854f3d6fd693d202b4e...

GHSA-PX4R-G4P3-HHQV

creationtimestamp| type| source ---|---|--- 2026-02-12 21:40:23+00:00| seen| https://gist.github.com/alon710/d01a7eedfc71c05885cd1abab59c3272...

Inspecting the Source of Go Modules

Go has indisputably the best package integrity story of any programming language ecosystem. The Go Checksum Database guarantees that every Go client in the world is using the same source for a given Go module and version, forever. It works despite the decentralized nature of Go modules, which can...

GHSA-CFH3-3JMP-RVHC

creationtimestamp| type| source ---|---|--- 2026-02-12 00:25:06+00:00| seen| https://seclists.org/oss-sec/2026/q1/162 2026-02-12 04:10:06+00:00| seen| https://gist.github.com/alon710/8164d166b74f218576799553a77db1a5...

CVE-2026-21518

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-21257

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio allows an authorized attacker to elevate privileges over a network...

CVE-2026-21516

Improper neutralization of special elements used in a command 'command injection' in Github Copilot allows an unauthorized attacker to execute code over a network...

CVE-2026-21256

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code over a network...

CVE-2016-1182

creationtimestamp| type| source ---|---|--- 2026-02-11 12:49:28+00:00| seen| https://gist.github.com/kitherill/35c9211065676c6c258f3a3f1d76a26d...

CVE-2026-25761

Super-linter is a combination of multiple linters to run as a GitHub Action or standalone. From 6.0.0 to 8.3.0, the Super-linter GitHub Action is vulnerable to command injection via crafted filenames. When this action is used in downstream GitHub Actions workflows, an attacker can submit a pull...

GHSA-FFRW-9MX8-89P8 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: zarf, skaffold, pulumi-language-java, teleport, crossplane, trivy, dagger, flux-image-automation-controller, melange, cerbos, apko, flux, nuclei, wolfictl, argo-workflows, kyverno, rancher-fleet, k9s, tfsec, gitea, xeol, timoni, kots, argocd-image-updater,...

GHSA-3VQJ-43W4-2Q58 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in several Visual Studio and .NET components. A malicious party could exploit the vulnerabilities to bypass security measures, grant themselves elevated privileges and potentially execute arbitrary code with the victim's privileges. For successful abuse, the...

CVE-2026-21523

Time-of-check time-of-use toctou race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network...