CVE-2026-55448

creationtimestamp| type| source ---|---|--- 2026-06-12 17:40:16+00:00| published-proof-of-concept| https://github.com/jdx/mise/security/advisories/GHSA-29hf-rm4x-xxph 2026-06-26 18:36:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7lljtyfl2l...

CVE-2026-33646

creationtimestamp| type| source ---|---|--- 2026-06-12 15:56:16+00:00| published-proof-of-concept| https://github.com/jdx/mise/security/advisories/GHSA-fjj5-v948-whjj 2026-06-26 19:05:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7na4xe2m2c...

Malicious code in web-model-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2c385c177531c421e5a49f41d931890a48c16c921b23cc20f2bf4cd8fae893 On npm install, postinstall.js sends an HTTPS POST to https://ddactic-lab.online/sc/beacon carrying the package name/version, Node version, OS,...

MAL-2026-5697 Malicious code in web-model-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2c385c177531c421e5a49f41d931890a48c16c921b23cc20f2bf4cd8fae893 On npm install, postinstall.js sends an HTTPS POST to https://ddactic-lab.online/sc/beacon carrying the package name/version, Node version, OS,...

GHSA-R8F8-4PGH-4M8V vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-50230

creationtimestamp| type| source ---|---|--- 2026-06-12 02:49:16+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-50230.yaml...

GHSA-7X6F-897Q-8H7J vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-68C4-77CF-437J vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-855R-9WVC-25GH vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-JMPJ-8P4W-J5RQ vulnerabilities

Vulnerabilities for packages: chromium...

OPENSUSE-SU-2026:11011-1 golang-github-prometheus-alertmanager-0.32.2-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-alertmanager-0.32.2-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-33760

creationtimestamp| type| source ---|---|--- 2026-06-11 19:53:35+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-9c59-2mvc-vfr8 2026-07-01 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpld4xhnma2e...

GHSA-F5VX-F6JP-89J6 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-GXHG-7JX8-M22J vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-3VRV-754Q-MQ3J vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-48547

KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the version or changes fields of patchNotesData.json, which are interpolated unsanitized into a childprocess.execSync cal...

CVE-2026-54015

creationtimestamp| type| source ---|---|--- 2026-06-11 19:05:34+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-4r4w-2wgp-w7cj...

CVE-2026-54014

creationtimestamp| type| source ---|---|--- 2026-06-11 19:04:46+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-j2c8-v969-8r5c...

CVE-2026-54013

creationtimestamp| type| source ---|---|--- 2026-06-11 19:02:12+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-v2qm-5wxj-qhj7...

CVE-2026-54010

creationtimestamp| type| source ---|---|--- 2026-06-11 18:57:21+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-vrhc-3fr6-pc3c 2026-07-18 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqwsjmkf4t2m...