CVE-2026-57118

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:48+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x8cv-xmq7-p8xp...

CVE-2026-57119

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:45+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p4pj-vh7h-6cqh...

CVE-2026-57121

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:39+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rh39-9c67-59mh...

CVE-2026-57124

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:31+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p57w 2026-07-23 17:02:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcvkwlge2r...

CVE-2026-57127

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:24+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-j4hj-7hfh-g2f4 2026-07-23 16:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcoi3qaq2u...

CVE-2026-57129

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:20+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2rcg-mm5h-xchx...

CVE-2026-57134

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:11+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4qq2-2j2x-x62c...

CVE-2026-57135

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:08+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-gqmf-56h7-rrpf...

CVE-2026-57136

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:06+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vjv9-7m7j-h833...

CVE-2026-57138

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:02+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vmmj-pfw7-fjwp...

CVE-2026-57139

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:57+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-j4f3-55x4-r6q2...

CVE-2026-57141

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:55+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p69m-4f92-2v84...

CVE-2026-57133

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:53+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-5jv7-2mjm-h6qj...

CVE-2026-57147

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:44+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cwj8-7gp2-ggcw 2026-07-23 17:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcz77dbd2q...

CVE-2026-57209

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:38+00:00| published-proof-of-concept| https://github.com/dadrus/heimdall/security/advisories/GHSA-4jgr-pg2m-m988...

CVE-2026-57146

creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:36+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-jxcw-qp4h-6jfq...

GHSA-G6XQ-892H-64W3 Composer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exposure)

Summary When Composer is run with -vvv debug verbosity, it could print a credential that was embedded directly in a repository or package URL, but not as a password, to its debug output. Composer already masked the password portion of such URLs, but the username portion was shown in clear text...

CVE-2026-44680

creationtimestamp| type| source ---|---|--- 2026-07-20 20:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94356 2026-07-21 00:00:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94356 2026-07-22 17:00:05+00:00| seen|...

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence AI skills or Model Context Protocol MCP servers to deliver a malware family known as SmartLoader as part of an ongoing campaign codenamed FakeGit...

CVE-2026-46412

@beproduct/nestjs-auth is a NestJS authentication module for BeProduct IDS Identity Server with OpenID Connect support. Between 2026-05-11 20:19 UTC and 22:56 UTC, an attacker used a compromised npm publish token to publish 18 malicious versions of @beproduct/nestjs-auth 0.1.2 through 0.1.19. The...