PYSEC-2026-2651 Mistune has a ReDoS in LINK_TITLE_RE that allows denial of service via crafted Markdown input

Summary A ReDoS Regular Expression Denial of Service vulnerability in LINKTITLERE allows an attacker who can supply Markdown for parsing to cause denial of service. A crafted 58-byte Markdown document blocks the parser for approximately 6 seconds measured on Apple M2, Python 3.14.3, with...

CVE-2026-59215

creationtimestamp| type| source ---|---|--- 2026-07-13 14:45:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjwmojf6i2w 2026-07-16 08:01:04+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrfqpnso2p 2026-07-24 18:35:06+00:00| published-proof-of-concept|...

PYSEC-2026-2997 pyload-ng has a WebUI JSON permission mismatch that lets ADD/DELETE users invoke MODIFY-only actions

Summary Several WebUI JSON endpoints enforce weaker permissions than the core API methods they invoke. This allows authenticated low-privileged users to execute MODIFY operations that should be denied by pyLoad's own permission model. Confirmed mismatches: - ADD user can reorder packages/files...

PYSEC-2026-3410 vLLM: Server-Side Request Forgery (SSRF) in `download_bytes_from_url `

Summary A Server Side Request Forgery SSRF vulnerability in downloadbytesfromurl allows any actor who can control batch input JSON to make the vLLM batch runner issue arbitrary HTTP/HTTPS requests from the server, without any URL validation or domain restrictions. This can be used to target...

PYSEC-2026-2534 JupyterLab vulnerable to potential authentication and CSRF tokens leak

Impact Users of JupyterLab who click on a malicious link may get their Authorization and XSRFToken tokens exposed to a third party when running an older jupyter-server version. Patches JupyterLab 4.1.0b2, 4.0.11, and 3.6.7 were patched. Workarounds No workaround has been identified, however users...

Exploit for CVE-2026-46529

─── CVE-2026-46529 ─── 🏴 AMN SECURITY 🏴 مركز أب...

CVE-2026-9824

creationtimestamp| type| source ---|---|--- 2026-07-13 13:19:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjrszmrjk2s 2026-07-13 14:03:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjuaxgcny27 2026-07-13 18:19:38+00:00| seen|...

GHSA-C7HR-448W-65PX

creationtimestamp| type| source ---|---|--- 2026-07-13 13:00:04+00:00| seen| https://t.me/poxek/6193 2026-07-14 00:00:48+00:00| published-proof-of-concept| https://t.me/poxek/6193...

CVE-2026-61976

creationtimestamp| type| source ---|---|--- 2026-07-13 12:09:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjnulvaea2f 2026-07-13 13:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjswlvtwy2k 2026-07-13 15:44:34+00:00| seen|...

CVE-2026-61952

creationtimestamp| type| source ---|---|--- 2026-07-13 12:06:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjnq45wys2i 2026-07-13 22:18:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkpwprsmj2z 2026-07-16 07:58:36+00:00| seen|...

CVE-2026-61975

creationtimestamp| type| source ---|---|--- 2026-07-13 11:38:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjm5r5slr2x 2026-07-13 13:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjtubhnlx2z 2026-07-14 03:05:32+00:00| seen|...

CVE-2026-57727

creationtimestamp| type| source ---|---|--- 2026-07-13 11:31:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjlra6xoo2c 2026-07-16 07:57:27+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr7btoi22y...

CVE-2026-57741

creationtimestamp| type| source ---|---|--- 2026-07-13 11:25:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjlhebvkm2y...

CVE-2026-57702

creationtimestamp| type| source ---|---|--- 2026-07-13 11:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjkvqdtb32w 2026-07-14 01:45:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql3hzwcvj2w 2026-07-14 01:45:28+00:00| seen|...

CVE-2026-22103

creationtimestamp| type| source ---|---|--- 2026-07-13 11:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjks5gs2y22 2026-07-13 18:51:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkedkds2q2y 2026-07-14 03:06:16+00:00| seen|...

CVE-2026-57810

creationtimestamp| type| source ---|---|--- 2026-07-13 11:13:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjkqku2ti25 2026-07-13 17:09:57+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqk6ohkb7p2q 2026-07-13 17:10:18+00:00| seen|...

CVE-2026-22095

creationtimestamp| type| source ---|---|--- 2026-07-13 11:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjkkxda4q2v 2026-07-13 17:50:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkawmzfkt2e 2026-07-14 03:06:01+00:00| seen|...

CVE-2026-57372

creationtimestamp| type| source ---|---|--- 2026-07-13 11:08:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjki53kpu2c 2026-07-13 18:59:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkersqb2a2w...

CVE-2026-22093

creationtimestamp| type| source ---|---|--- 2026-07-13 11:08:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjkhgrukm2t 2026-07-13 17:49:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkavfwvjs2y 2026-07-14 03:05:48+00:00| seen|...

CVE-2026-57388

creationtimestamp| type| source ---|---|--- 2026-07-13 11:05:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjkcfpmde2e 2026-07-16 07:56:22+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr5dxfdi2y...