GHSA-XPP7-93X6-V29M

creationtimestamp| type| source ---|---|--- 2026-08-05 00:31:06+00:00| seen| https://gist.github.com/alon710/3fbc424d9726688cb9c9bb1b3b35fa73...

GHSA-CHGM-3698-JM42

creationtimestamp| type| source ---|---|--- 2026-08-04 23:31:07+00:00| seen| https://gist.github.com/alon710/c4a761947b80459c983e02321c736c9a 2026-08-05 00:00:39+00:00| seen| https://gist.github.com/alon710/c4a761947b80459c983e02321c736c9a...

CVE-2026-45537

OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the constructuri function concatenates multiple URI components protocol, username, domain, port, params into a fixed 1024-byte global BSS buffer without any bounds checking. When a routi...

GHSA-XM43-3M56-W3WF

creationtimestamp| type| source ---|---|--- 2026-08-04 22:31:36+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6 2026-08-05 00:00:39+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6...

GHSA-3CG5-48J3-V4GV

creationtimestamp| type| source ---|---|--- 2026-08-04 21:31:22+00:00| seen| https://gist.github.com/alon710/e57220ec033758e1c7ba8d20ade18b9d...

CVE-2026-66902

creationtimestamp| type| source ---|---|--- 2026-08-04 21:24:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/5jerlnuteddya 2026-08-05 20:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedshg2v22h 2026-08-06 12:32:03+00:00| seen|...

CVE-2026-70487

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, inline direct model metadata accepted client-supplied knowledge attachments without filtering them against the caller's read access. Any authenticated user who knew another user's file i...

ECHO-4652-B79B-C705

Bulletin has no description...

ECHO-1B10-505E-409C

Bulletin has no description...

GHSA-M8RV-5G2X-5CG5 vulnerabilities

Vulnerabilities for packages: pulumi, prism, code-server, npm, vitess, renovate, langfuse...

CGA-7234-5HJ8-J5Q9

Bulletin has no description...

MINI-FV6X-7258-8Q3P

Bulletin has no description...

CVE-2026-70478

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the POST /api/v1/oauth2-credential/refresh/:credentialId endpoint is included in WHITELISTURLS and requires no authentication. The endpoint decrypts the stored credential, sends a refresh...

CVE-2026-70478

Summary of CVE-2026-70478 (Flowise) : The unauthenticated endpoint POST /api/v1/oauth2-credential/refresh/:credentialId is exposed via WHITELIST_URLS and decrypts the stored credential to perform an OAuth token refresh, returning a new access_token in the response. An attacker with a valid creden...

CVE-2017-20242

creationtimestamp| type| source ---|---|--- 2026-08-04 19:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbpybpcej2z...

CVE-2026-16060

creationtimestamp| type| source ---|---|--- 2026-08-04 19:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbpjy4fcc2o...

CGA-9JF5-QMM3-5C74

Bulletin has no description...

CVE-2026-69255

creationtimestamp| type| source ---|---|--- 2026-08-04 18:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbmftr7f42o 2026-08-06 20:45:21+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-flowise...

pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER

A flaw was found in pyasn1, a Python library for Abstract Syntax Notation One ASN.1. The BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A remote attacker could exploit this by providing a specially crafted payload...

CVE-2026-24254

creationtimestamp| type| source ---|---|--- 2026-08-04 18:06:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dqxjsusacosnh 2026-08-04 19:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbpr5hku22m 2026-08-05 09:30:27+00:00| seen|...