CVE-2026-57812

creationtimestamp| type| source ---|---|--- 2026-07-13 19:44:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkhdomdzp2a 2026-07-14 02:30:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql5yuredv2f 2026-07-16 08:17:48+00:00| seen|...

CVE-2026-57802

creationtimestamp| type| source ---|---|--- 2026-07-13 19:29:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkghhqdrs2y 2026-07-16 08:07:59+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrs4lork2p...

CVE-2026-57790

creationtimestamp| type| source ---|---|--- 2026-07-13 19:28:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkggxwtys2y 2026-07-16 08:07:55+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrryjq5723...

CVE-2026-61463

creationtimestamp| type| source ---|---|--- 2026-07-13 18:57:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkeoqqymn2k 2026-07-14 03:51:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlck67g3c2w 2026-07-16 08:21:13+00:00| seen|...

CVE-2026-61667

creationtimestamp| type| source ---|---|--- 2026-07-13 18:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkebiubbw2v 2026-09-15 20:08:40+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlgiy44dn2f...

CVE-2026-35210

creationtimestamp| type| source ---|---|--- 2026-07-13 18:30:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkd5omnae2f 2026-07-16 08:05:36+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrnubw7r2i...

CVE-2026-58228

Cross-site scripting vulnerability in phoenixframework phoenixliveview allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.validdestination!/2 and Phoenix.LiveView.Utils.validlivenavigationdestination!/2 functions in...

EUVD-2026-43515

Cross-site scripting vulnerability in phoenixframework phoenixliveview allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.validdestination!/2 and Phoenix.LiveView.Utils.validlivenavigationdestination!/2 functions in...

CVE-2026-58228 Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>

Cross-site scripting vulnerability in phoenixframework phoenixliveview allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.validdestination!/2 and Phoenix.LiveView.Utils.validlivenavigationdestination!/2 functions in...

CVE-2026-58228 Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>

Cross-site scripting vulnerability in phoenixframework phoenixliveview allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.validdestination!/2 and Phoenix.LiveView.Utils.validlivenavigationdestination!/2 functions in...

CVE-2026-58228 Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>

Cross-site scripting vulnerability in phoenixframework phoenixliveview allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.validdestination!/2 and Phoenix.LiveView.Utils.validlivenavigationdestination!/2 functions in...

EEF-CVE-2026-58228 Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>

Summary Cross-site scripting vulnerability in phoenixframework phoenix\live\view allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.valid\destination!/2 and Phoenix.LiveView.Utils.valid\live\navigation\destination!/2...

CVE-2026-13241

creationtimestamp| type| source ---|---|--- 2026-07-13 17:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkaarczuq2t...

CVE-2026-13239

creationtimestamp| type| source ---|---|--- 2026-07-13 17:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqka56ugml2b...

CVE-2026-13238

creationtimestamp| type| source ---|---|--- 2026-07-13 17:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7znix7l2w...

CVE-2026-61692

creationtimestamp| type| source ---|---|--- 2026-07-13 17:32:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqk7woclfu2l...

CVE-2026-13236

creationtimestamp| type| source ---|---|--- 2026-07-13 17:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7w2sdkl2b 2026-07-21 04:45:08+00:00| seen| https://jvn.jp/en/jp/JVN20592637...

CVE-2026-12535

creationtimestamp| type| source ---|---|--- 2026-07-13 17:26:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7lekcft2w...

CVE-2026-11909

creationtimestamp| type| source ---|---|--- 2026-07-13 17:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7lcy44r2f...

Decidim: Private exports can be downloaded through reusable links

Description The normal downloadyourdata flow requires the requester to be logged in as the export owner, but the resulting Active Storage blob redirect URL can be replayed without authentication by anyone who obtains it. Technical description This private export flow turns an authenticated,...