Linux Distros Unpatched Vulnerability : CVE-2026-58203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a...

PT-2026-56968

Name of the Vulnerable Software and Affected Versions decompress versions prior to 4.2.2 Description An issue exists during archive extraction where arbitrary hardlink creation is possible. When processing hardlink entries type === 'link', the x.linkname field from the archive is passed directly ...

CVE-2026-58210

creationtimestamp| type| source ---|---|--- 2026-07-08 23:10:14+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mq6ai44tz62n...

CVE-2026-54590

creationtimestamp| type| source ---|---|--- 2026-07-08 22:59:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq67v3wjmr2z 2026-07-20 09:53:36+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr2zkmrplk2t 2026-07-20 09:53:36+00:00| seen|...

CVE-2026-8649

creationtimestamp| type| source ---|---|--- 2026-07-08 22:54:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq67m5hson27 2026-07-10 19:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcwa2beha2f 2026-07-11 01:47:04+00:00| seen|...

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview yt-dlp is an A youtube-dl fork with additional features and patches Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' via improper validation of input in the --write-link, --write-url-link,...

CVE-2026-55596

creationtimestamp| type| source ---|---|--- 2026-07-08 22:35:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq66jmihnl27...

CVE-2026-58208

creationtimestamp| type| source ---|---|--- 2026-07-08 22:19:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq65o5u3x42x 2026-07-11 10:25:23+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqeh56pdjb27 2026-07-11 10:25:25+00:00| seen|...

CVE-2026-8801

creationtimestamp| type| source ---|---|--- 2026-07-08 22:13:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq65cl2ju42g 2026-07-09 19:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqaeg6yw7v2h 2026-07-10 19:56:03+00:00| seen|...

GHSA-VMWX-M75V-QVCH

creationtimestamp| type| source ---|---|--- 2026-07-08 22:12:23+00:00| seen| https://gist.github.com/alon710/f5073530cad3dd719e641dcee2ba88b8...

CVE-2026-59935

creationtimestamp| type| source ---|---|--- 2026-07-08 22:07:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq64xsux7c24 2026-07-10 07:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqbllqmplz25...

CVE-2017-17990

creationtimestamp| type| source ---|---|--- 2026-07-08 22:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq64x7paqs2k...

CVE-2026-60105

creationtimestamp| type| source ---|---|--- 2026-07-08 22:01:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mq64ms7gqd2w 2026-07-09 09:14:21+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mq7cadytwy26 2026-07-11 00:30:32+00:00| seen|...

CVE-2026-59879

creationtimestamp| type| source ---|---|--- 2026-07-08 21:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq63ma3dqe2i 2026-07-11 08:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqe7fxgexo2n...

GHSA-37H2-6P4F-MP3Q

creationtimestamp| type| source ---|---|--- 2026-07-08 21:42:03+00:00| seen| https://gist.github.com/alon710/faf458b17f73f7d92e775ebdde2a6b10...

CVE-2026-59936

creationtimestamp| type| source ---|---|--- 2026-07-08 21:36:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq637k3iih2w 2026-07-10 07:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqbnbfawqa2n 2026-07-10 07:43:10+00:00| seen|...

Malicious code in tslint-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b464b1646f8e2d36ce68a86af599cc49d5381f08af70302ff01f42957234a1 The package presents itself as the pino logger README, index.d.ts, docs/, and lib/ files all reference pinojs/pino but is published under the unrelat...

CVE-2026-58494 Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination

Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-link creation and renaming check directory permissions but not matching FilePerms on source and destination preopens, allowing a WASI guest with a read-only source file capability to overwrite...

CVE-2026-58494 Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination

Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-link creation and renaming check directory permissions but not matching FilePerms on source and destination preopens, allowing a WASI guest with a read-only source file capability to overwrite...

UBUNTU-CVE-2026-55404

yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to 2026.7.4, the --write-link, --write-url-link, and --write-desktop-link options can write .url or .desktop shortcut files using attacker-controlled webpageurl or filename metadata without sufficient validation or escaping,...