CVE-2026-45757

creationtimestamp| type| source ---|---|--- 2026-06-24 22:23:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2xdfcte427...

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity through the serveUpload process. An attacker can access and download content from private repositories belonging to other tenants by binding their own repository to an existing object...

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity through the serveUpload process. An attacker can access and download content from private repositories belonging to other tenants by binding their own repository to an existing object...

CVE-2026-57280

creationtimestamp| type| source ---|---|--- 2026-06-24 21:44:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2v5sgr2r27 2026-07-01 01:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpkexekuu52l...

CVE-2026-53765 chrome-devtools-mcp: daemon.pid write follows symlinks in /tmp fallback runtime directory

Chrome DevTools for agents chrome-devtools-mcp lets your coding agent control and inspect a live Chrome browser. From 0.20.0 until 1.1.0, The chrome-devtools-mcp daemon writes its PID file with fs.writeFileSync to a deterministic runtime path. On typical macOS environments, and on Linux sessions...

MINI-7J43-JHC3-7P33

Bulletin has no description...

MINI-XPPV-94HH-M2G4

Bulletin has no description...

MINI-2VC5-XJP8-7J4Q

Bulletin has no description...

MINI-RGM7-HG3W-G72H

Bulletin has no description...

MINI-786R-RXVG-Q7JX

Bulletin has no description...

CVE-2026-4297

creationtimestamp| type| source ---|---|--- 2026-06-24 21:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp2tl5xum72l...

CVE-2026-52812

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git LFS storage is content-addressed by OID alone /// but per-repo authorization lives in the lfsobject table keyed repoid, oid. serveUpload skips re-uploading when the OID file already exists on disk and inserts a new repoid, oid r...

CVE-2026-42208 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-27708 FOSSBilling: IDOR in Servicecustom Client API allows cross-client data access

FOSSBilling is a free, open-source billing and client management system. In versions 0.7.2 and prior, the Servicecustom Client API's call method accepts an orderid parameter and fetches the associated order without verifying the authenticated client owns it, potentially exposing cross-client data...

CGA-84RX-2J2X-FPJ6

Bulletin has no description...

CVE-2026-56130

creationtimestamp| type| source ---|---|--- 2026-06-24 18:58:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mp2lukil662t 2026-06-25 10:55:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4bf7ic4j2j...

CVE-2026-53122

creationtimestamp| type| source ---|---|--- 2026-06-24 18:50:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2lhhhkqw2z 2026-07-23 21:25:06+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrdrlwmbmn24...

CVE-2026-53128

creationtimestamp| type| source ---|---|--- 2026-06-24 18:45:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2l6ivx4f2c 2026-07-06 06:48:54+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 08:26:10+00:00| seen...

CVE-2026-53120

creationtimestamp| type| source ---|---|--- 2026-06-24 18:14:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2jgtpcv72o...

CVE-2026-35025

creationtimestamp| type| source ---|---|--- 2026-06-24 17:20:46+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp2ggd7tze2e 2026-06-24 17:50:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2i33pblo2p 2026-06-24 19:39:40+00:00| seen|...