CVE-2026-46421

creationtimestamp| type| source ---|---|--- 2026-07-15 19:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpi7vnsnr2y 2026-07-15 20:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpljcxnfq2e...

MINI-JGCG-9PJ5-M3XV

Bulletin has no description...

MINI-2W42-35C4-QVGF

Bulletin has no description...

MINI-95MQ-G5P3-GPP5

Bulletin has no description...

MINI-G2J3-RV3P-GR42

Bulletin has no description...

MINI-683C-H7F7-FGHG

Bulletin has no description...

MINI-9WQ7-VHR9-22XC

Bulletin has no description...

GHSA-36QX-FR4F-26G5

creationtimestamp| type| source ---|---|--- 2026-07-15 19:00:46+00:00| seen| https://gist.github.com/rodrigo-arias/52b0854a2e57501b04c4c8d6728a34ea...

SUSE CVE-2026-59885

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small crafted payload containing an OID with many arcs consumes excessive CPU per decode call and c...

GHSA-8Q6Q-M837-FV64

creationtimestamp| type| source ---|---|--- 2026-07-15 18:32:06+00:00| seen| https://gist.github.com/alon710/93e1535b55e3d3a6b392785e4c9401da...

pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER

A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One ASN.1. The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload...

CVE-2026-45337

Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the deviceAuthorization plugin treats any authenticated session as the owner of any pending device code because GET /device does not claim the row and POST /device/approve and POST /device/deny...

CVE-2026-62287

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61873. Reason: This candidate is a duplicate of CVE-2026-61873. Notes: All CVE users should reference CVE-2026-61873 instead of this candidate...

CVE-2026-62180

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61440. Reason: This candidate is a duplicate of CVE-2026-61440. Notes: All CVE users should reference CVE-2026-61440 instead of this candidate...

CVE-2026-54563

creationtimestamp| type| source ---|---|--- 2026-07-15 17:17:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp7zq7njw22 2026-08-26 16:35:10+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-w5fv-7x5q-g8qp...

CVE-2026-59954

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.2, Apollo ConfigService may allow unauthorized access to configuration data when AccessKey or management key authentication is enabled because ConfigService can accept a...

CVE-2026-20150

creationtimestamp| type| source ---|---|--- 2026-07-15 17:11:14+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116925102408110334 2026-07-15 19:01:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpftydweo22 2026-07-16 13:00:29+00:00| seen|...

CVE-2026-58660

Kanboard through 1.2.52, fixed in commit 564cc30, BoardAjaxController save method used by the kanban board drag-and-drop endpoint validates the caller's role on the attacker-supplied projectid but never verifies that the supplied taskid actually belongs to that project. Because task identifiers a...

CVE-2026-62294

creationtimestamp| type| source ---|---|--- 2026-07-15 17:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp7a4ktc32s 2026-07-23 19:59:49+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mrdmtg2tub2n...

CVE-2026-62178

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61427. Reason: This candidate is a duplicate of CVE-2026-61427. Notes: All CVE users should reference CVE-2026-61427 instead of this candidate...