GHSA-CVVH-RHRC-WG4Q vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap, dotnet, powershell, dotnet-sdk, promitor...

GHSA-V422-HMWV-36X6 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, jupyter-base-notebook, tileserver-gl, code-server, sqlpad, kubeflow-pipelines, langfuse, json-server, argo-workflows...

GHSA-G8R8-53C2-PM3F vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap, dotnet, powershell, dotnet-sdk, promitor...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the shouldAcceptNewConnection process. An attacker can inject spoofed appcast item data by establishing unauthorized local connections to the registered Mach service after stage 1...

Malicious code in spateo-release (PyPI)

Source: kam193 21400e8510d0663de6c3a4454fe99d9200cb83ae8d1ecdc137c99f3668da4293 Versions 1.1.2 were compromised. Compromised packages start an obfuscated infostealer. The infostealer is a heavily obfuscated JavaScript code executed using Bun runtime on Python startup. It collectes all kinds of...

xssscannerpro

XSSScannerPro v2.0 XSSScannerPro — veb tətbiqlərdə XSS C...

GHSA-JPW9-PFVF-9F58 vulnerabilities

Vulnerabilities for packages: kserve-huggingfaceserver-cuda-13.3, semgrep, litellm...

GHSA-XCPC-8H2W-3J85 vulnerabilities

Vulnerabilities for packages: sqlpad, saf, redisinsight, kibana...

GHSA-6R8X-57C9-28J4

creationtimestamp| type| source ---|---|--- 2026-07-21 10:31:21+00:00| seen| https://gist.github.com/alon710/8369d28698d5eaa2f4badffaca60e4b4...

CLEANSTART-2026-UA62313 Security fixes for ghsa-fw7p-63qq-7hpr applied in versions: 2.43.1-r1

Security vulnerability affects the dex package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZJ21676 Security fixes for CVE-2021-43616, CVE-2026-11525, CVE-2026-12151, CVE-2026-23745, CVE-2026-23950, CVE-2026-24001, CVE-2026-25547, CVE-2026-26960, CVE-2026-26996, CVE-2026-27903, CVE-2026-27904, CVE-2026-31802, CVE-2026-45149, CVE-2026-53655, CVE-2026-6733, CVE-2026-9496, CVE-2026-9679, ghsa-35p6-xmwp-9g52, ghsa-3ppc-4f35-3m26, ghsa-83g3-92jg-28cx, ghsa-g8m3-5g58-fq7m, ghsa-jxxr-4gwj-5jf2, ghsa-p88m-4jfj-68fv, ghsa-qffp-2rhf-9h96, ghsa-vxpw-j846-p89q applied in versions: 11.10.0-r1, 11.10.0-r2, 11.11.0-r0, 11.11.0-r1, 11.11.0-r2, 11.14.0-r0, 11.14.0-r2, 11.14.0-r3, 11.17.0-r1, 11.17.0-r2, 11.7.0-r0, 11.8.0-r0, 8.1.4-r0

Multiple security vulnerabilities affect the npm package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VB75499 Security fixes for ghsa-f4xh-w4cj-qxq8 applied in versions: 4.1.1-r0

Security vulnerability affects the py3-langgraph-checkpoint package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LB41442 Security fixes for CVE-2021-0341, CVE-2022-1471, CVE-2023-3635, CVE-2025-67735, CVE-2026-33870, CVE-2026-33871, CVE-2026-41417, CVE-2026-42578, CVE-2026-42579, CVE-2026-42580, CVE-2026-42581, CVE-2026-42583, CVE-2026-42584, CVE-2026-42585, CVE-2026-42587, CVE-2026-44249, CVE-2026-45416, CVE-2026-45536, CVE-2026-45673, CVE-2026-45674, CVE-2026-47244, CVE-2026-47691, CVE-2026-48043, CVE-2026-50010, CVE-2026-50020, CVE-2026-50560, CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, ghsa-38f8-5428-x5cv, ghsa-3cqm-mf7h-prrj, ghsa-3qp7-7mw8-wx86, ghsa-45q3-82m4-75jr, ghsa-563q-j3cm-6jxm, ghsa-57rv-r2g8-2cj3, ghsa-5jmj-h7xm-6q6v, ghsa-5pvg-856g-cp85, ghsa-5x3r-wrvg-rp6q, ghsa-676x-f7gg-47vc, ghsa-72hv-8253-57qq, ghsa-84h7-rjj3-6jx4, ghsa-c2gf-v879-257j, ghsa-c653-97m9-rcg9, ghsa-cm33-6792-r9fm, ghsa-f6hv-jmp6-3vwv, ghsa-hgj6-7826-r7m5, ghsa-hvcg-qmg6-jm4c, ghsa-j3rv-43j4-c7qm, ghsa-m4cv-j2px-7723, ghsa-mj4r-2hfc-f8p6, ghsa-mjmj-j48q-9wg2, ghsa-pwqr-wmgm-9rr8, ghsa-rmj7-2vxq-3g9f, ghsa-v8h7-rr48-vmmv, ghsa-w33c-445m-f8w7, ghsa-w573-9ffj-6ff9, ghsa-w9fj-cfpg-grvv, ghsa-x4gw-5cx5-pgmh, ghsa-xmv7-r254-6q78, ghsa-xxqh-mfjm-7mv9 applied in versions: 3.3.0-r1, 3.3.0-r2

Multiple security vulnerabilities affect the s3proxy package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-WM3W-8RRP-J577

creationtimestamp| type| source ---|---|--- 2026-07-21 01:31:18+00:00| seen| https://gist.github.com/alon710/84075b1c42ed77e39cb61a3601f10615...

CVE-2026-62684

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:26+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-833g-cqhp-h72j...

CVE-2026-59197

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:21+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr 2026-07-21 12:31:41+00:00| seen| https://gist.github.com/alon710/a3a7380a4e0465c6c32d9063bd8033a6 2026-07-22...

CVE-2026-59198

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:19+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-fj7v-r99m-22gq 2026-07-21 11:31:12+00:00| seen| https://gist.github.com/alon710/48f3deb1ca1eafb4018fbe6276da18c1...

CVE-2026-59205

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:08+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6 2026-07-21 06:31:17+00:00| seen| https://gist.github.com/alon710/c194376028b5fea9d1333b8a7894f724...

CVE-2026-59728

creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:03+00:00| published-proof-of-concept| https://github.com/withastro/astro/security/advisories/GHSA-8j5q-mfj2-5q9q...

PT-2026-62112

MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vulnerable to exfiltration of GITHUB TOKEN with write permissions to the repository. The vulnerable workflow used pull reque...