CVE-2026-88012

creationtimestamp| type| source ---|---|--- 2026-09-10 22:35:12+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-7ghq-v6jf-g56c...

CVE-2026-88011

creationtimestamp| type| source ---|---|--- 2026-09-10 22:35:10+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-rf44-j88r-hh8c...

CVE-2026-87015

creationtimestamp| type| source ---|---|--- 2026-09-10 22:35:03+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-p78m-89r6-pgf7...

@argos-ci/core: CI Branch Name OS Command Injection

CI Branch Name OS Command Injection in @argos-ci/core Summary @argos-ci/[email protected] passes attacker-controlled CI branch/ref strings directly into an execSync template literal in packages/core/src/ci-environment/git.ts:89. When a CI project has hasRemoteContentAccess: false, the Argos upload flow...

CVE-2026-88060

creationtimestamp| type| source ---|---|--- 2026-09-10 22:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv72xhjqk72f 2026-09-10 22:35:14+00:00| published-proof-of-concept| https://github.com/angular/angular/security/advisories/GHSA-v3p8-whq6-r5jg...

CVE-2026-88062

creationtimestamp| type| source ---|---|--- 2026-09-10 22:08:00+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv72tqjxvr2t 2026-09-10 22:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv72xjylga2y 2026-09-10 22:35:07+00:00| published-proof-of-concept|...

CVE-2026-88056

creationtimestamp| type| source ---|---|--- 2026-09-10 21:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6xm5stpu2f 2026-09-10 22:35:16+00:00| published-proof-of-concept| https://github.com/angular/angular/security/advisories/GHSA-f6mr-pjwc-34m4...

NPM: n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open

NPM: n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open vulnerability discovered by ? in WordPress Npm n8n versions 1.123.76...

EUVD-2026-74276

n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open...

GHSA-5M98-CGCR-XX3Q n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open

Impact The GitHub Trigger generated a signing secret when it registered a webhook and verified X-Hub-Signature-256 on each delivery. When GitHub answered the create request with a 422 because a webhook for the URL already existed, the node adopted the remote hook but kept only its id and events,...

n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open

Impact The GitHub Trigger generated a signing secret when it registered a webhook and verified X-Hub-Signature-256 on each delivery. When GitHub answered the create request with a 422 because a webhook for the URL already existed, the node adopted the remote hook but kept only its id and events,...

CVE-2026-55416

creationtimestamp| type| source ---|---|--- 2026-09-10 20:35:08+00:00| published-proof-of-concept| https://github.com/pimcore/pimcore/security/advisories/GHSA-23rh-xw42-fq82...

CVE-2026-56346

creationtimestamp| type| source ---|---|--- 2026-09-10 16:35:25+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-5x2w-37xf-7962...

CVE-2026-87999

creationtimestamp| type| source ---|---|--- 2026-09-10 16:35:21+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-34r3-9m95-vq73...

CVE-2026-87998

creationtimestamp| type| source ---|---|--- 2026-09-10 16:35:19+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-2724-6cpj-gf3v...

CVE-2026-87997

creationtimestamp| type| source ---|---|--- 2026-09-10 16:35:17+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-3pf7-q2g3-wj28...

CVE-2026-87994

creationtimestamp| type| source ---|---|--- 2026-09-10 16:35:10+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-fmqh-xp37-5hr8...

GO-2026-6371 Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision in github.com/semaphoreui/semaphore

Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision in github.com/semaphoreui/semaphore...

CVE-2026-88881

Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...

EUVD-2026-75431

Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...