CVE-2026-62350

creationtimestamp| type| source ---|---|--- 2026-07-15 20:40:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqplfhvrnj2i...

CVE-2026-62353

creationtimestamp| type| source ---|---|--- 2026-07-15 20:36:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpl6iytqy2s...

CVE-2026-8055

creationtimestamp| type| source ---|---|--- 2026-07-15 20:35:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpl3db3ao22...

GHSA-P3VC-36G9-X9GR vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

CVE-2026-52869 MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to 1.27.2, the SSE and stateful Streamable HTTP transports mcp.server.sse.SseServerTransport and mcp.server.streamablehttpmanager.StreamableHTTPSessionManager route requests to existing...

Improper Authorization

Apollo Portal is vulnerable to Improper Authorization. The vulnerability is due to missing application and namespace permission checks when retrieving releases by ID, which allows an authenticated low-privileged user to access unauthorized release data by supplying a valid release ID...

CVE-2026-58659

creationtimestamp| type| source ---|---|--- 2026-07-15 19:49:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpikb5eaz2n...

CVE-2026-46421

creationtimestamp| type| source ---|---|--- 2026-07-15 19:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpi7vnsnr2y 2026-07-15 20:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpljcxnfq2e...

MINI-95MQ-G5P3-GPP5

Bulletin has no description...

MINI-2W42-35C4-QVGF

Bulletin has no description...

MINI-JGCG-9PJ5-M3XV

Bulletin has no description...

MINI-9WQ7-VHR9-22XC

Bulletin has no description...

MINI-683C-H7F7-FGHG

Bulletin has no description...

MINI-G2J3-RV3P-GR42

Bulletin has no description...

GHSA-36QX-FR4F-26G5

creationtimestamp| type| source ---|---|--- 2026-07-15 19:00:46+00:00| seen| https://gist.github.com/rodrigo-arias/52b0854a2e57501b04c4c8d6728a34ea...

SUSE CVE-2026-59885

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small crafted payload containing an OID with many arcs consumes excessive CPU per decode call and c...

GHSA-8Q6Q-M837-FV64

creationtimestamp| type| source ---|---|--- 2026-07-15 18:32:06+00:00| seen| https://gist.github.com/alon710/93e1535b55e3d3a6b392785e4c9401da...

pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER

A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One ASN.1. The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload...

CVE-2026-45337

Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the deviceAuthorization plugin treats any authenticated session as the owner of any pending device code because GET /device does not claim the row and POST /device/approve and POST /device/deny...

CVE-2026-62287

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61873. Reason: This candidate is a duplicate of CVE-2026-61873. Notes: All CVE users should reference CVE-2026-61873 instead of this candidate...