CVE-2026-88002

creationtimestamp| type| source ---|---|--- 2026-09-10 00:35:06+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-jqhh-cjmq-vmv6 2026-09-10 02:31:55+00:00| seen| https://gist.github.com/alon710/401536538bb41a7576b21df62b940fb2...

CVE-2026-88001

creationtimestamp| type| source ---|---|--- 2026-09-10 00:35:04+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-5x7x-4c3c-qf5w 2026-09-10 01:32:33+00:00| seen| https://gist.github.com/alon710/855b51c2ea136c7c49beab7d27d1ef40...

GHSA-3CGP-3CQX-J8W2

creationtimestamp| type| source ---|---|--- 2026-09-10 00:32:33+00:00| seen| https://gist.github.com/alon710/48cdccd93c734ae28b1351fbe3368bd9...

PT-2026-89392

Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...

PT-2026-89720

Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0...

CVE-2026-88881: URL Redirection to Untrusted Site

Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...

PT-2026-89735

CI Branch Name OS Command Injection in @argos-ci/core Summary @argos-ci/[email protected] passes attacker-controlled CI branch/ref strings directly into an execSync template literal in packages/core/src/ci-environment/git.ts:89. When a CI project has hasRemoteContentAccess: false, the Argos upload flow...

Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without ownership verification

Summary identrail's GitHub App connection-completion endpoint binds a fully client-supplied installationid to the caller's workspace without verifying that the installation belongs to, or was installed by, the workspace that initiated the connect flow. identrail then mints a GitHub App installati...

GHSA-CP3J-M783-3PH5 Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without ownership verification

Summary identrail's GitHub App connection-completion endpoint binds a fully client-supplied installationid to the caller's workspace without verifying that the installation belongs to, or was installed by, the workspace that initiated the connect flow. identrail then mints a GitHub App installati...

CVE-2026-56855

creationtimestamp| type| source ---|---|--- 2026-09-09 22:34:08+00:00| seen| https://gist.github.com/cwayne18/3474f4393a3ce289f2538aee39a18778 2026-09-10 00:01:53+00:00| seen| https://gist.github.com/cwayne18/3474f4393a3ce289f2538aee39a18778...

CVE-2026-78662

creationtimestamp| type| source ---|---|--- 2026-09-09 22:34:08+00:00| seen| https://gist.github.com/cwayne18/3474f4393a3ce289f2538aee39a18778 2026-09-10 00:01:53+00:00| seen| https://gist.github.com/cwayne18/3474f4393a3ce289f2538aee39a18778...

Malicious code in @neroxkira/vangal-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af1543fb92f079191de134bd36dbb64c340928804df8486acf43546e2c6e185 package.json declares libsignal with the source github:RILLYZY/libsignal-node, an unpinned reference to a third-party GitHub repository with no tag o...

MAL-2026-16103 Malicious code in @neroxkira/vangal-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af1543fb92f079191de134bd36dbb64c340928804df8486acf43546e2c6e185 package.json declares libsignal with the source github:RILLYZY/libsignal-node, an unpinned reference to a third-party GitHub repository with no tag o...

CVE-2026-50024

creationtimestamp| type| source ---|---|--- 2026-09-09 20:35:05+00:00| published-proof-of-concept| https://github.com/WangYihang/GitHacker/security/advisories/GHSA-hr3m-4qwq-3mgc...

CVE-2026-85730

creationtimestamp| type| source ---|---|--- 2026-09-09 19:31:51+00:00| seen| https://gist.github.com/alon710/d1e0c342d90c380e5c2e016452073fb0 2026-09-09 20:35:03+00:00| published-proof-of-concept| https://github.com/squirrelchat/smol-toml/security/advisories/GHSA-7w5x-hrqm-74c2...

GHSA-7W5X-HRQM-74C2

creationtimestamp| type| source ---|---|--- 2026-09-09 19:31:51+00:00| seen| https://gist.github.com/alon710/d1e0c342d90c380e5c2e016452073fb0...

CVE-2025-24979

creationtimestamp| type| source ---|---|--- 2026-09-09 19:05:37+00:00| published-proof-of-concept| https://github.com/lf-edge/ekuiper/security/advisories/GHSA-pqqc-8v73-9gg2...

CVE-2025-24978

creationtimestamp| type| source ---|---|--- 2026-09-09 18:35:56+00:00| published-proof-of-concept| https://github.com/lf-edge/ekuiper/security/advisories/GHSA-g8rh-fjm6-h2h9...

CVE-2025-58363

creationtimestamp| type| source ---|---|--- 2026-09-09 18:35:22+00:00| published-proof-of-concept| https://github.com/lf-edge/ekuiper/security/advisories/GHSA-c23q-fw86-9h5x...

CVE-2026-85619

creationtimestamp| type| source ---|---|--- 2026-09-09 17:22:57+00:00| seen| https://gist.github.com/mtholmquist/ab550712a4628c7c7c4705bceccd93b3 2026-09-09 17:22:57+00:00| seen| https://gist.github.com/mtholmquist/57afb96cf97414ce442f505da762c79d...