GHSA-PJJP-65R7-PPGM

creationtimestamp| type| source ---|---|--- 2026-06-25 00:01:29+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp34su7fvx26...

PT-2026-52410

Name of the Vulnerable Software and Affected Versions Visual Link Preview versions 2.3.1 and earlier Description Subscriber sensitive data exposure occurs in the software, potentially allowing unauthorized access to private information. Recommendations Disable or isolate the software immediately...

GitLab 8.3 < 18.11.6 / 19.0 < 19.0.3 / 19.1 < 19.1.1 (CVE-2026-12635)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an...

Linux Distros Unpatched Vulnerability : CVE-2026-49851

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately O...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following through the WriteToCachedFile function when handling network cache files in certain configurations. An attacker can overwrite specific host files and change their ownership by planting a symbolic lin...

CVE-2026-13208

creationtimestamp| type| source ---|---|--- 2026-06-24 23:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp32fkx4mk25...

Improper Handling of Unexpected Data Type

Overview Affected versions of this package are vulnerable to Improper Handling of Unexpected Data Type via the Link::isAllowedUri function when processing Tiptap JSON containing an attrs.href field set to an array instead of a string. An attacker can cause persistent server-side crashes by...

CVE-2026-9620

creationtimestamp| type| source ---|---|--- 2026-06-24 23:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp32bpkatu2v...

CVE-2026-11998

creationtimestamp| type| source ---|---|--- 2026-06-24 22:48:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2yr4pulj2e 2026-07-04 04:10:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mps6wazp4r2k...

CVE-2026-13201

creationtimestamp| type| source ---|---|--- 2026-06-24 22:41:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2yegi7gl25...

CVE-2020-14070

creationtimestamp| type| source ---|---|--- 2026-06-24 22:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2y3yhv3j2h...

CVE-2026-52797

creationtimestamp| type| source ---|---|--- 2026-06-24 22:27:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2xjwx3ej2f...

CVE-2026-45757

creationtimestamp| type| source ---|---|--- 2026-06-24 22:23:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2xdfcte427...

CVE-2026-48720

creationtimestamp| type| source ---|---|--- 2026-06-24 22:17:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2wyyhzc72i...

CVE-2026-57296

creationtimestamp| type| source ---|---|--- 2026-06-24 22:12:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2wpzqjvh2j...

CVE-2026-42450

creationtimestamp| type| source ---|---|--- 2026-06-24 22:02:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2w64k4ye2c...

CVE-2026-57301

creationtimestamp| type| source ---|---|--- 2026-06-24 21:41:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2uxprae32o 2026-07-01 01:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpkdbq6jqu2l...

CVE-2026-48719

creationtimestamp| type| source ---|---|--- 2026-06-24 21:30:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2uesniqb2l...

CVE-2026-47110 Tiptap for PHP < 2.1.1 DoS via Malformed href Attribute

Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to cause a denial of service by submitting Tiptap JSON with the attrs.href field set to an array instead of a string, causing an unhandled TypeError in the Link::isAllowedUri functio...

CVE-2026-47110

Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to cause a denial of service by submitting Tiptap JSON with the attrs.href field set to an array instead of a string, causing an unhandled TypeError in the Link::isAllowedUri functio...