72852 matches found
CGA-5Q5R-R724-P7G3
Bulletin has no description...
CGA-5VFF-HM99-2FQ6
Bulletin has no description...
CVE-2026-0646
creationtimestamp| type| source ---|---|--- 2026-06-16 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-167-05 2026-06-16 16:12:33+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mog6uxnajr2d 2026-06-16 17:25:57+00:00| seen|...
CVE-2026-9307
creationtimestamp| type| source ---|---|--- 2026-06-16 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-167-04 2026-06-16 18:31:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moggnabbgj2i...
MINI-PGVP-97HJ-4865
Bulletin has no description...
CVE-2026-1764
creationtimestamp| type| source ---|---|--- 2026-06-16 04:10:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moewkmggos2j...
CGA-9F3W-26VM-JCH7
Bulletin has no description...
GHSA-MXFR-6HCW-J9RQ
creationtimestamp| type| source ---|---|--- 2026-06-16 03:07:04+00:00| seen| https://gist.github.com/Julius-mercator/b78185acb27329feb3508768444bd583...
GHSA-99F4-GRH7-6PCQ vulnerabilities
Vulnerabilities for packages: langfuse, pulumi, jitsucom-jitsu...
CVE-2026-48068 vulnerabilities
Vulnerabilities for packages: langfuse, pulumi, jitsucom-jitsu...
PT-2026-50181
Name of the Vulnerable Software and Affected Versions Daytona versions prior to 0.185.0 Description Organization role update and delete endpoints authorized the caller as an owner of the organization in the request path but mutated the target role using only its identifier without verifying the...
CVE-2026-39949
This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...
GHSA-5W86-C3RQ-VJJ7
creationtimestamp| type| source ---|---|--- 2026-06-15 23:11:08+00:00| seen| https://gist.github.com/alon710/6e083e538662dc872931a903f1bab93e...
CVE-2026-11850
creationtimestamp| type| source ---|---|--- 2026-06-15 22:40:51+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3moee4eyg372o 2026-07-21 12:01:10+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r5pjbkd2z 2026-07-29 12:01:42+00:00| seen|...
CVE-2026-52700
creationtimestamp| type| source ---|---|--- 2026-06-15 22:01:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moebwj2hkn26 2026-06-15 22:02:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moebymanjo2b...
GHSA-999R-QQ7V-R334
creationtimestamp| type| source ---|---|--- 2026-06-15 21:41:17+00:00| seen| https://gist.github.com/alon710/35567f659305b91f7bbc4ee7db5dd621...
Nuxt: Dev server discloses project absolute path and persistent workspace UUID via `/.well-known/appspecific/com.chrome.devtools.json`
Summary When running nuxt dev, Nuxt registers an unauthenticated route at /.well-known/appspecific/com.chrome.devtools.json that returns the absolute filesystem path of the project root and a per-project UUID persisted to nodemodules/.cache/nuxt/chrome-workspace.json. The route is enabled by...
GHSA-RQ7W-G337-39QQ Nuxt: Dev server discloses project absolute path and persistent workspace UUID via `/.well-known/appspecific/com.chrome.devtools.json`
Summary When running nuxt dev, Nuxt registers an unauthenticated route at /.well-known/appspecific/com.chrome.devtools.json that returns the absolute filesystem path of the project root and a per-project UUID persisted to nodemodules/.cache/nuxt/chrome-workspace.json. The route is enabled by...