CVE-2026-20944

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:17:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115889158303083604 2026-01-13 18:18:45+00:00| seen|...

GO-2026-4303 Mattermost Server is vulnerable CSV Injection in github.com/mattermost/mattermost-server

Mattermost Server is vulnerable CSV Injection in github.com/mattermost/mattermost-server...

GO-2026-4297 Mattermost Server has intermittent Authorization bypass for resource-owners in github.com/mattermost/mattermost-server

Mattermost Server has intermittent Authorization bypass for resource-owners in github.com/mattermost/mattermost-server...

GHSA-MQW7-C5GG-XQ97

creationtimestamp| type| source ---|---|--- 2026-01-13 14:36:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115888290409404878...

GHSA-MQW7-C5GG-XQ97 Jervis Has a RSA PKCS#1 Padding Vulnerability

Vulnerability https://github.com/samrocketman/jervis/blob/157d2b63ffa5c4bb1d8ee2254950fd2231de2b05/src/main/groovy/net/gleske/jervis/tools/SecurityIO.groovyL463-L465...

GO-2026-4293 WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora

WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora...

GO-2026-4286 OpenFlagr contains an authentication bypass vulnerability in the HTTP middleware in github.com/openflagr/flagr

OpenFlagr contains an authentication bypass vulnerability in the HTTP middleware in github.com/openflagr/flagr...

GO-2026-4277 listmonk Vulnerable to Stored XSS Leading to Admin Account Takeover in github.com/knadh/listmonk

listmonk Vulnerable to Stored XSS Leading to Admin Account Takeover in github.com/knadh/listmonk. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...

RHSA-2026:0424

creationtimestamp| type| source ---|---|--- 2026-01-12 13:26:42+00:00| seen| https://gist.github.com/Darkcrai86/3cc9ce8a0ecea48c6749ff66fb3d9cd5...

GHSA-7FMW-85QM-H22P vulnerabilities

Vulnerabilities for packages: keycloak...

GHSA-527X-5WRF-22M2 vulnerabilities

Vulnerabilities for packages: cloudflared...

GHSA-74P9-4V44-WWX5 vulnerabilities

Vulnerabilities for packages: python...

GitHub: Missing Access Control in MigrationFile allows attacker to upload files to any Migration

A Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized content to be uploaded to a user's repository migration export due to a missing authorization check in the repository migration upload endpoint. The vulnerability could be exploited by...

GHSA-524M-Q5M7-79MM

creationtimestamp| type| source ---|---|--- 2026-01-10 07:01:39+00:00| seen| Telegram/i2g9ck4oFpG2FQ6NO-wq7UgJ3FLiFKBZXo4--EYsPHmrFO0 2026-01-24 21:25:37+00:00| seen| https://gist.github.com/alon710/bb9834de1a00354c3bc3ff35ebeeb06f 2026-01-24 22:41:01+00:00| seen|...

GHSA-9WX5-5C3V-3QMX vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-qemu-melange, linux-qemu...

GHSA-G7MW-CR59-R458 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-qemu-melange, linux-qemu...

CVE-2023-49113

The Kiuwan Local Analyzer KLA Java scanning application contains several hard-coded secrets in plain text format. In some cases, this can potentially compromise the confidentiality of the scan results. Several credentials were found in the JAR files of the Kiuwan Local Analyzer. The JAR file...

CVE-2023-31584

GitHub repository cu/silicon commit a9ef36 was discovered to contain a reflected cross-site scripting XSS vulnerability via the User Input field...

CVE-2023-4879

Cross-site Scripting XSS - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git...

CVE-2021-41599

A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This...