CVE-2026-53129

creationtimestamp| type| source ---|---|--- 2026-06-24 18:16:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2jkgsgap2i...

CVE-2026-53124

creationtimestamp| type| source ---|---|--- 2026-06-24 18:12:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2jdhyq422q...

CVE-2026-53118

creationtimestamp| type| source ---|---|--- 2026-06-24 18:11:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2jabs7vk2p...

CVE-2026-53947 Ghost: Member existence leak via magic link sign-in response

Ghost is a Node.js content management system. From 5.18.0 until 6.21.1, a discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacker to determine whether a given email address belongs to a registered member of a Ghost site. This vulnerability is...

CVE-2026-53947 Ghost: Member existence leak via magic link sign-in response

Ghost is a Node.js content management system. From 5.18.0 until 6.21.1, a discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacker to determine whether a given email address belongs to a registered member of a Ghost site. This vulnerability is...

CVE-2026-53947

Ghost (Node.js CMS) contains a member existence leak via the magic link sign-in flow in versions 5.18.0–6.21.0, caused by differing responses from the members signin endpoints. An unauthenticated user could confirm whether an email is registered on a Ghost site. The issue is fixed in version 6.21...

CVE-2026-12537

creationtimestamp| type| source ---|---|--- 2026-06-24 17:55:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2ie25yct2k 2026-06-29 01:20:33+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpfd3vdhxd2f 2026-08-08 11:50:10+00:00| seen|...

CVE-2026-11878

creationtimestamp| type| source ---|---|--- 2026-06-24 17:40:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2hj6q7od23 2026-07-20 05:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr2l7zmipy2l...

CVE-2019-12768

creationtimestamp| type| source ---|---|--- 2026-06-24 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2hdkb6tm2h...

EUVD-2026-39002

Warp is an agentic development environment. From 0.2023.10.24.08.03.stable00 until 0.2026.05.06.15.42.stable01, Warp may open executable local files through the operating system default file handler. A malicious Markdown document or project can contain a local-file link that appears as normal...

CVE-2026-54699 Warp: OS command injection when opening terminal links from WSL

Warp is an agentic development environment. From 0.2024.03.12.08.02.stable01 until 0.2026.05.06.15.42.stable01, Warp contains an OS command injection vulnerability in the WSL URL-opening fallback. When Warp is running under WSL and cannot open a URL through wslview, it falls back to a Windows...

CVE-2026-53042

In the Linux kernel, the following vulnerability has been resolved: fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal CXL is linked before fwctl in drivers/Makefile. Both use moduleinit, so cxlpcidriverinit runs first. When cxlpciprobe calls fwctlregister and then...

CVE-2020-35173

creationtimestamp| type| source ---|---|--- 2026-06-24 17:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2fnv6bi32r...

CVE-2026-49851

Mistune (Python Markdown parser) prior to 3.3.0 is vulnerable to CPU exhaustion DoS due to quadratic-time behavior in parse_link_text when parsing many consecutive '[' characters. The code repeatedly scans input with a regex inside a loop, yielding O(n^2) runtime on affected inputs and enabling a...

CVE-2026-49851 Mistune: Potential DoS via quadratic-time parsing in parse_link_text

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately On² behavior in parselinktext. When parsing Markdown containing many consecutive characters, parselinktext repeatedly scans the input usin...

CVE-2026-49851 Mistune: Potential DoS via quadratic-time parsing in parse_link_text

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately On² behavior in parselinktext. When parsing Markdown containing many consecutive characters, parselinktext repeatedly scans the input usin...

CVE-2026-49851

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately On² behavior in parselinktext. When parsing Markdown containing many consecutive characters, parselinktext repeatedly scans the input usin...

CVE-2026-49851 Mistune: Potential DoS via quadratic-time parsing in parse_link_text

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately On² behavior in parselinktext. When parsing Markdown containing many consecutive characters, parselinktext repeatedly scans the input usin...

CVE-2026-56121

creationtimestamp| type| source ---|---|--- 2026-06-24 17:02:50+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mp2fgb4nax2n 2026-06-24 18:05:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2ivxcg222z 2026-07-13 22:00:16+00:00| seen|...

CVE-2026-53042 fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal

In the Linux kernel, the following vulnerability has been resolved: fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal CXL is linked before fwctl in drivers/Makefile. Both use moduleinit, so cxlpcidriverinit runs first. When cxlpciprobe calls fwctlregister and then...