35901 matches found
GHSA-Q49M-57VM-C8CC
creationtimestamp| type| source ---|---|--- 2026-05-04 20:10:29+00:00| seen| https://gist.github.com/alon710/e5f670283b66e1c583d8b3f3f9d1efba...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the YAML metadata parsing process. An attacker can cause excessive memory consumption and potentially trigger an out-of-memory condition on the server by uploading a crafted image ...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference through the UploadAllFiles process. An attacker can cause the daemon to crash by importing a truncated or malformed backup archive that triggers a nil-pointer dereference during tar file iteration. Remediation...
io.quarkiverse.githubapp:quarkus-github-app (0.0.5), io.quarkiverse.githubapp:quarkus-github-app-deployment (0.0.5) +99 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (1.11.2.final)
io.quarkus:quarkus-vertx-http MAVEN version 1.11.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.githubapp:quarkus-github-app 0.0.5 -...
io.quarkiverse.githubapp:quarkus-github-app (>=1.5.0, <=1.6.0), io.quarkiverse.githubapp:quarkus-github-app-deployment (>=1.5.0, <=1.6.0) +111 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (2.5.2.final)
io.quarkus:quarkus-vertx-http MAVEN version 2.5.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.githubapp:quarkus-github-app =1.5.0, =1.5.0, =1.5.0, =1.5.0, =1.5.0, =1.6.0 -...
io.quarkiverse.githubapp:quarkus-github-app (>=1.1.2, <=1.1.3), io.quarkiverse.githubapp:quarkus-github-app-deployment (>=1.1.2, <=1.1.3) +114 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (2.0.1.final)
io.quarkus:quarkus-vertx-http MAVEN version 2.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.githubapp:quarkus-github-app =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.3 -...
CVE-2026-41358
creationtimestamp| type| source ---|---|--- 2026-05-04 17:10:29+00:00| seen| https://gist.github.com/alon710/d4f3d9fbcfea6645ceefb383fa46637f...
⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More
This week, the shadows moved faster than the patches. While most teams were still triaging last month’s alerts, attackers had already turned control panels into kill switches, kernels into open doors, and open-source pipelines into silent delivery systems. The game has shifted from breach to...
CVE-2026-44009
creationtimestamp| type| source ---|---|--- 2026-05-03 21:34:48+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-9vg3-4rfj-wgcm 2026-07-09 07:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq753cw5on2d...
summary-awi-poc
summary-awi-poc Public proof-of-concept repository for valida...
CVE-2026-44641
creationtimestamp| type| source ---|---|--- 2026-05-03 08:34:38+00:00| published-proof-of-concept| https://github.com/microsoft/apm/security/advisories/GHSA-xhrw-5qxx-jpwr...
Fedora 44 : GitPython (2026-9342da13e0)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9342da13e0 advisory. Fixes security defects GHSA-rpm5-65cw-6hj4, GHSA-x2qx-6953-8485, GHSA-7545-fcxq-7j24, and GHSA-v87r-6q3f-2j67. Tenable has extracted the preceding descriptio...
Malicious code in graphicsctxs (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4786ca298bffb09916e622e06411ae44cb51c842a6eb9bf7bcf445c051463888 Packages in this campaign are used to exfiltrate data from users installing code from prepared Github repositories. Packages contain code to exfiltrate files...
CVE-2026-44003
creationtimestamp| type| source ---|---|--- 2026-05-01 20:44:52+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-wp5r-2gw5-m7q7...
CVE-2026-44002
creationtimestamp| type| source ---|---|--- 2026-05-01 20:44:37+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-v27g-jcqj-v8rw...
CVE-2026-44004
creationtimestamp| type| source ---|---|--- 2026-05-01 20:43:52+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-6785-pvv7-mvg7...
CVE-2026-44005
creationtimestamp| type| source ---|---|--- 2026-05-01 20:42:00+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq 2026-07-09 07:48:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq75fzsvsz2q 2026-09-12 10:00:05+00:0...
GHSA-5GVM-8X7G-H7XX vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...