ECHO-D46B-865D-7398

Bulletin has no description...

ECHO-9EFD-D326-A8A6

Bulletin has no description...

CVE-2026-58413

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, EnvironmentManager.restoreenv, backupId computes the backup path with joinenvDir, '.backups', backupId and only checks that this path exists. It does not resolve the result or verify that it remains under...

CVE-2026-58413 EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, EnvironmentManager.restoreenv, backupId computes the backup path with joinenvDir, '.backups', backupId and only checks that this path exists. It does not resolve the result or verify that it remains under...

GHSA-6Q95-FCWC-4H44

creationtimestamp| type| source ---|---|--- 2026-07-20 15:00:03+00:00| seen| https://t.me/bdufstecru/3329 2026-07-21 00:00:38+00:00| published-proof-of-concept| https://t.me/bdufstecru/3329...

CVE-2026-26199

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If H5Igetname is invoked on a group id with 0 for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if H5Igetname is invoked in a way...

EUVD-2026-45970

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If H5Igetname is invoked on a group id with 0 for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if H5Igetname is invoked in a way...

CVE-2026-63757

creationtimestamp| type| source ---|---|--- 2026-07-20 14:10:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3hvwo7v42j 2026-07-23 07:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrcbnpagfx2c...

CVE-2026-64623

creationtimestamp| type| source ---|---|--- 2026-07-20 14:05:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3hmy6bbm2b...

MINI-3RFG-GPQG-M5C7

Bulletin has no description...

CVE-2026-57309

creationtimestamp| type| source ---|---|--- 2026-07-20 13:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3fk5onpq2z 2026-07-20 13:28:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3fkjakgt2x 2026-07-20 13:30:32+00:00| seen|...

SUSE-SU-2026:22830-1 Security update for python-pyasn1

This update for python-pyasn1 fixes the following issues: - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs bsc1271464. - CVE-2026-59885: quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service bsc1271465. -...

CVE-2026-15813

creationtimestamp| type| source ---|---|--- 2026-07-20 11:55:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3aexvnnd23...

CVE-2026-8825

creationtimestamp| type| source ---|---|--- 2026-07-20 08:50:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2vz4xvbz2q...

CVE-2026-9833

creationtimestamp| type| source ---|---|--- 2026-07-20 08:25:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2unl7wiq2b 2026-08-02 00:00:07+00:00| seen| Telegram/n43DQvJfEpQ2CCDqB7-wyN5Ry32gFxLKP6x3peumWwNg 2026-08-02 21:12:25+00:00| published-proof-of-concept|...

MINI-57R7-GWCH-7GXQ

Bulletin has no description...

MINI-V2V9-R796-CV3P

Bulletin has no description...

MINI-C6C3-X42J-772P

Bulletin has no description...

gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier URI or Service SRV Subject Alternative Names SANs. This could cause the certificate validation process to incorrectly fall back to...

CVE-2026-10724

The Reviews Feed WordPress plugin before 2.6.5 does not neutralize WordPress shortcodes contained in third-party review content before rendering it through its dynamic block, allowing unauthenticated attackers to execute arbitrary shortcodes on pages that display the feed by planting a shortcode ...