CVE-2026-57112

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:59+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vmf9-xx9w-86wx...

CVE-2026-57116

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:55+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-892r-p3jq-jp24 2026-07-23 17:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcs2wqc62v...

CVE-2026-57118

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:48+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x8cv-xmq7-p8xp...

CVE-2026-57119

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:45+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p4pj-vh7h-6cqh...

CVE-2026-57121

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:39+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rh39-9c67-59mh...

CVE-2026-57124

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:31+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p57w 2026-07-23 17:02:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcvkwlge2r...

CVE-2026-57127

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:24+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-j4hj-7hfh-g2f4 2026-07-23 16:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcoi3qaq2u...

CVE-2026-57129

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:20+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2rcg-mm5h-xchx...

CVE-2026-57134

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:11+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4qq2-2j2x-x62c...

CVE-2026-57135

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:08+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gqmf-56h7-rrpf...

CVE-2026-57136

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:06+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vjv9-7m7j-h833...

CVE-2026-57138

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:02+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vmmj-pfw7-fjwp...

CVE-2026-57139

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:57+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-j4f3-55x4-r6q2...

CVE-2026-57141

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:55+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p69m-4f92-2v84...

CVE-2026-57133

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:53+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-5jv7-2mjm-h6qj...

CVE-2026-57147

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:44+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cwj8-7gp2-ggcw 2026-07-23 17:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcz77dbd2q...

CVE-2026-57209

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:38+00:00| published-proof-of-concept| https://github.com/dadrus/heimdall/security/advisories/GHSA-4jgr-pg2m-m988...

CVE-2026-57146

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:36+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-jxcw-qp4h-6jfq...

GHSA-G6XQ-892H-64W3 Composer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exposure)

Summary When Composer is run with -vvv debug verbosity, it could print a credential that was embedded directly in a repository or package URL, but not as a password, to its debug output. Composer already masked the password portion of such URLs, but the username portion was shown in clear text...

CVE-2026-44680

creationtimestamp| type| source ---|---|--- 2026-07-20 20:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94356 2026-07-21 00:00:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94356 2026-07-22 17:00:05+00:00| seen|...