PT-2026-50721

Name of the Vulnerable Software and Affected Versions Kirby versions prior to 4.9.4 Kirby versions prior to 5.4.4 Description Kirby sites using the writer field in any blueprint are susceptible to cross-site scripting XSS. The link and email marks within the writer components fail to prevent the...

PT-2026-50737

Name of the Vulnerable Software and Affected Versions @tinacms/mdx versions prior to 2.1.7 tinacms versions prior to 3.9.3 Description Rich-text parsing and the default link/image renderers fail to sanitize the url field on Slate link/image nodes. This allows content containing javascript: or...

Mattermost Server 10.11.x < 10.11.16 / 11.5.x < 11.5.5 / 11.6.x < 11.6.2 Multiple Vulnerabilities (MMSA-2026-00616 / MMSA-2026-00649 / MMSA-2026-00655 / MMSA-2026-00656 / MMSA-2026-00661 / MMSA-2026-00662 / MMSA-2026-00665)

The version of Mattermost Server installed on the remote host is affected by multiple vulnerabilities: - Mattermost fails to require role-management authorization when setting the schemeadmin flag on group syncable link and patch endpoints, which allows a user with group-link permissions to...

CVE-2026-54387

creationtimestamp| type| source ---|---|--- 2026-06-17 23:23:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojhftygey2v 2026-08-02 15:23:25+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms4c2epkfr2c 2026-08-02 15:48:02+00:00| seen|...

CVE-2026-48817

creationtimestamp| type| source ---|---|--- 2026-06-17 23:18:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojh4tpt4r27...

CVE-2026-39560

creationtimestamp| type| source ---|---|--- 2026-06-17 23:13:23+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mojgufnwu72s...

CVE-2026-54388

creationtimestamp| type| source ---|---|--- 2026-06-17 23:05:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojgffzrlv2c 2026-08-02 15:23:25+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms4c2epkfr2c...

CVE-2026-55201

creationtimestamp| type| source ---|---|--- 2026-06-17 22:55:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojfv5xdlv2k...

CVE-2026-55199

creationtimestamp| type| source ---|---|--- 2026-06-17 22:46:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojfeyatqp2x 2026-06-23 20:49:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moybmlrqgb2f 2026-06-24 17:29:11+00:00| seen|...

CVE-2026-12529

creationtimestamp| type| source ---|---|--- 2026-06-17 22:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojf3ha6tj2k...

CVE-2026-53805

creationtimestamp| type| source ---|---|--- 2026-06-17 21:57:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojcnac43b2v 2026-06-18 07:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mokcncgamb2g 2026-07-16 19:00:08+00:00| seen|...

CVE-2026-30803

creationtimestamp| type| source ---|---|--- 2026-06-17 21:37:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojbjfq3ut2o...

CVE-2026-55196

creationtimestamp| type| source ---|---|--- 2026-06-17 21:32:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojbah6mma2f 2026-06-22 00:31:36+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motn3xbtzo2m...

CVE-2026-53871

creationtimestamp| type| source ---|---|--- 2026-06-17 21:28:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojayqynw62f...

CVE-2026-30802

creationtimestamp| type| source ---|---|--- 2026-06-17 21:21:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojam2yhus2f...

CVE-2026-8673

creationtimestamp| type| source ---|---|--- 2026-06-17 21:19:15+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mojaidpcwb2j...

CVE-2026-44723

creationtimestamp| type| source ---|---|--- 2026-06-17 21:16:20+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mojacor35o24 2026-07-04 12:23:02+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mpt2h4rlf52i...

GHSA-52MM-H59V-F3C7 earmark: Stored XSS via unescaped HTML attribute values

Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site scripting via unescaped HTML attribute values. 'Elixir.Earmark.Transform':makeatt1/2 in lib/earmark/transform.ex splices attribute values verbatim between two literal " bytes: ...

CVE-2026-12515

creationtimestamp| type| source ---|---|--- 2026-06-17 18:31:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moix4m6zw52r...

CVE-2026-20220

creationtimestamp| type| source ---|---|--- 2026-06-17 18:21:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiwkjvl2j2m 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1928...