CVE-2026-35395

creationtimestamp| type| source ---|---|--- 2026-04-06 23:04:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuestsrv22d 2026-04-06 23:22:09+00:00| seen| Telegram/m01DCzKFy5kAtT9sjIWhyEARPkz65AkyqWTYGgzfJ1E6g 2026-04-07 05:39:23+00:00| seen|...

CVE-2026-5707

creationtimestamp| type| source ---|---|--- 2026-04-06 23:01:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuemkuwn322 2026-04-06 23:22:29+00:00| seen| Telegram/dGmhhMfdsalqLxLHWWo3a-Yu-qP75XdMdTLlCh9YxDeGRw 2026-04-07 04:11:35+00:00| seen|...

CVE-2026-5683

creationtimestamp| type| source ---|---|--- 2026-04-06 22:56:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuedmgehs2i...

CVE-2026-35442

creationtimestamp| type| source ---|---|--- 2026-04-06 22:46:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miudrphust2d 2026-04-06 23:22:09+00:00| seen| Telegram/m01DCzKFy5kAtT9sjIWhyEARPkz65AkyqWTYGgzfJ1E6g 2026-04-07 05:00:27+00:00| seen|...

CVE-2026-5709

creationtimestamp| type| source ---|---|--- 2026-04-06 22:21:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miucg2xmrl2o 2026-04-06 23:22:29+00:00| seen| Telegram/dGmhhMfdsalqLxLHWWo3a-Yu-qP75XdMdTLlCh9YxDeGRw 2026-04-10 21:37:07+00:00| seen|...

CVE-2026-22675

creationtimestamp| type| source ---|---|--- 2026-04-06 22:16:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuc4p6oll2s...

CVE-2026-35409

creationtimestamp| type| source ---|---|--- 2026-04-06 22:10:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miubr544fh2j 2026-04-06 23:22:09+00:00| seen| Telegram/m01DCzKFy5kAtT9sjIWhyEARPkz65AkyqWTYGgzfJ1E6g 2026-04-07 05:20:37+00:00| seen|...

GHSA-P5RH-VMHP-GVCW

creationtimestamp| type| source ---|---|--- 2026-04-06 19:28:28+00:00| published-proof-of-concept| Telegram/nNz4AuVWmZsX2vjW9IzWDm0wIi6EKHH8QFJ1lll9JUSWJdI 2026-04-07 02:48:17+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3miurceg26g22...

CVE-2026-35020

...

CVE-2026-35020

CVE-2026-35020 entry is rejected/not used by the CNA.

CVE-2026-35166

A flaw was found in Hugo, a static site generator. This vulnerability arises from improper escaping of links and image links within the default markdown to HTML renderer. A remote attacker could exploit this by crafting malicious markdown content, potentially leading to information disclosure or...

CVE-2026-35029

creationtimestamp| type| source ---|---|--- 2026-04-06 18:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitvlluyaz24 2026-04-06 19:28:45+00:00| published-proof-of-concept| Telegram/ECjdy8s76GZBalwnIB79ij56tbajMeprVumTyCn-zmzM 2026-04-16 00:07:28+00:00| seen|...

CVE-2026-34992

creationtimestamp| type| source ---|---|--- 2026-04-06 18:19:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mituubi63e2i 2026-04-06 19:28:45+00:00| published-proof-of-concept| Telegram/ECjdy8s76GZBalwnIB79ij56tbajMeprVumTyCn-zmzM...

CVE-2026-35030

creationtimestamp| type| source ---|---|--- 2026-04-06 18:17:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mituq7dnbv2g 2026-04-06 19:28:45+00:00| published-proof-of-concept| Telegram/ECjdy8s76GZBalwnIB79ij56tbajMeprVumTyCn-zmzM 2026-04-16 00:07:28+00:00| seen|...

CVE-2026-35166

Hugo is a static site generator. From 0.60.0 to before 0.159.2, links and image links in the default markdown to HTML renderer are not properly escaped. Hugo users who trust their Markdown content or have custom render hooks for links and images are not affected. This vulnerability is fixed in...

UBUNTU-CVE-2026-35166

Hugo is a static site generator. From 0.60.0 to before 0.159.2, links and image links in the default markdown to HTML renderer are not properly escaped. Hugo users who trust their Markdown content or have custom render hooks for links and images are not affected. This vulnerability is fixed in...

CVE-2026-35046

creationtimestamp| type| source ---|---|--- 2026-04-06 18:11:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitug4jdp62i...

CVE-2026-35047

creationtimestamp| type| source ---|---|--- 2026-04-06 18:08:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mituac6cnv25 2026-04-06 19:29:29+00:00| published-proof-of-concept| Telegram/0wjdVVOdHVRh-NR-AUdnOvXJcqqbi6lE8Vl80iGy2s6Zy0...

GHSA-X3F4-V83F-7WP2 Authorizer: Password reset token theft and full auth token redirect via unvalidated redirect_uri

Hi, I found that 6 endpoints in Authorizer accept a user-controlled redirecturi and append sensitive tokens to it without validating the URL against AllowedOrigins. The OAuth /app handler validates redirecturi at httphandlers/app.go:46, but the GraphQL mutations and verifyemail handler skip...

Authorizer: Password reset token theft and full auth token redirect via unvalidated redirect_uri

Hi, I found that 6 endpoints in Authorizer accept a user-controlled redirecturi and append sensitive tokens to it without validating the URL against AllowedOrigins. The OAuth /app handler validates redirecturi at httphandlers/app.go:46, but the GraphQL mutations and verifyemail handler skip...