CVE-2026-54693

creationtimestamp| type| source ---|---|--- 2026-07-29 17:31:36+00:00| seen| https://gist.github.com/alon710/122d827ca97ab8457c12647e94a1482c 2026-07-29 18:18:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsjxpyzb222...

CVE-2026-54662

creationtimestamp| type| source ---|---|--- 2026-07-29 16:35:22+00:00| published-proof-of-concept| https://github.com/acacode/swagger-typescript-api/security/advisories/GHSA-hqj5-cw9f-rx67 2026-07-29 18:42:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsld7nukl24...

CVE-2026-54660

creationtimestamp| type| source ---|---|--- 2026-07-29 16:35:10+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrse6yre5z2p 2026-07-29 16:35:25+00:00| published-proof-of-concept| https://github.com/acacode/swagger-typescript-api/security/advisories/GHSA-h754-fxp7-88wx...

Tame Dependabot: Group your updates, slow the cadence, keep security fast

If you maintain an active repository, you know the feeling. You open your notifications on a Monday morning and there they are: five, 10, sometimes a dozen Dependabot pull requests, each bumping a single dependency by a single patch version. Individually, every one of them is helpful. Collectivel...

io.quarkiverse.githubapp:quarkus-github-app (0.0.5), io.quarkiverse.githubapp:quarkus-github-app-deployment (0.0.5) +99 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-vertx-http (1.11.2.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.11.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.githubapp:quarkus-github-app 0.0.5 -...

io.quarkiverse.githubapp:quarkus-github-app (>=1.5.0, <=1.6.0), io.quarkiverse.githubapp:quarkus-github-app-deployment (>=1.5.0, <=1.6.0) +111 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-vertx-http (2.5.2.final)

io.quarkus:quarkus-vertx-http MAVEN version 2.5.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.githubapp:quarkus-github-app =1.5.0, =1.5.0, =1.5.0, =1.5.0, =1.5.0, =1.6.0 -...

CVE-2026-59947

A flaw was found in Composer, a dependency manager for the PHP language. When Composer is executed with the -vvv debug verbosity option, it can inadvertently expose sensitive credentials, such as a GitHub Personal Access Token, by printing them in the debug output. This occurs because certain...

CVE-2026-16475

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:54+00:00| seen| https://t.me/GithubRedTeam/95671 2026-07-29 20:00:03+00:00| seen| Telegram/Ig8EiCACgPrEXQ5i-DIyVp2gol1J9WigCZpGPavBW5BRY 2026-07-29 20:00:04+00:00| seen| Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTVRC7C2rNjBX8 2026-07-30...

OPENSUSE-SU-2026:21494-1 Security update for gh

This update for gh fixes the following issues: Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version boo1266618...

CVE-2026-51290

creationtimestamp| type| source ---|---|--- 2026-07-29 08:53:33+00:00| seen| https://gist.github.com/programmervuln/b9336a5d90ed38222932b37190e963e9 2026-07-30 19:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrv7rn5hx62r...

GHSA-RJRW-MJQ6-HPMM

creationtimestamp| type| source ---|---|--- 2026-07-29 08:31:18+00:00| seen| https://gist.github.com/alon710/b7d97e28e81c8217964934097e896a47...

GHSA-FVCV-HH55-X3R4

creationtimestamp| type| source ---|---|--- 2026-07-29 08:01:20+00:00| seen| https://t.me/nxblog/1758 2026-07-30 00:02:09+00:00| seen| https://t.me/nxblog/1758 2026-08-01 20:00:05+00:00| published-proof-of-concept| https://t.me/nxblog/1758 2026-08-02 00:00:22+00:00| published-proof-of-concept|...

GHSA-HQ33-8JGP-8QQ3

creationtimestamp| type| source ---|---|--- 2026-07-29 07:31:46+00:00| seen| https://gist.github.com/alon710/5949a16fe56601aa95656371bd907946...

GHSA-H655-847G-Q4F7 vulnerabilities

Vulnerabilities for packages: xorg-server...

GHSA-QXWX-HR5V-H5Q4 vulnerabilities

Vulnerabilities for packages: eco-python-curl...

CVE-2026-54650

creationtimestamp| type| source ---|---|--- 2026-07-29 02:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqtdm6wwg23 2026-07-29 02:46:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqvvxefvd2s 2026-07-29 03:32:05+00:00| seen|...

CVE-2026-54659

creationtimestamp| type| source ---|---|--- 2026-07-29 00:31:42+00:00| seen| https://gist.github.com/alon710/3def853e2525c617d6890d62679fbc37 2026-07-29 00:35:03+00:00| published-proof-of-concept| https://github.com/ddnexus/pagy/security/advisories/GHSA-2xmw-f8j8-wfxc 2026-07-29 03:39:55+00:00|...

CVE-2026-64863

creationtimestamp| type| source ---|---|--- 2026-07-28 23:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqm5e554m22 2026-07-29 00:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqmmv237e2q 2026-07-29 00:35:05+00:00|...

CVE-2026-62325

creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:41+00:00| published-proof-of-concept| https://github.com/goshs-labs/goshs/security/advisories/GHSA-rjrw-mjq6-hpmm 2026-07-28 23:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqm5cwt5q2y 2026-07-29...

CVE-2026-49447

creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:39+00:00| published-proof-of-concept| https://github.com/azukaar/Cosmos-Server/security/advisories/GHSA-5fqm-cc34-fcf5...