CVE-2026-52945

creationtimestamp| type| source ---|---|--- 2026-07-02 20:13:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpottc4qdb2k...

CVE-2026-55952

creationtimestamp| type| source ---|---|--- 2026-07-02 19:21:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoqvtlhjo2o 2026-07-03 08:38:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq5hhbt5t2n 2026-07-03 09:42:35+00:00| seen|...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the inline parameter in the file download process. An attacker can execute arbitrary scripts in the context of the application's web origin by uploading a crafted HTML file and convincing a victim to open a...

GHSA-93Q6-WWJH-JC6H @asymmetric-effort/specifyjs: CSS expression sanitization is bypassable in renderToString

Finding Location: core/src/server/render-to-string.ts:307-311 CSS value sanitization stripped expression and urljavascript: using simple regex, but could be bypassed with CSS unicode escapes \65xpression, null bytes, or CSS comments exp//ression. Mitigating Factor: These CSS injection vectors onl...

CVE-2026-55118

creationtimestamp| type| source ---|---|--- 2026-07-02 18:43:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoor235rc2w 2026-07-03 07:25:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzez46vy2o 2026-07-03 08:39:20+00:00| seen|...

CVE-2026-55113

creationtimestamp| type| source ---|---|--- 2026-07-02 18:39:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpool2ytca2n 2026-07-03 07:17:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyvas46o27 2026-07-08 11:01:21+00:00| seen|...

CVE-2026-54401

creationtimestamp| type| source ---|---|--- 2026-07-02 18:29:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpony4gxfx2z 2026-07-03 07:07:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyectjt62c 2026-07-08 11:01:21+00:00| seen|...

CVE-2026-50747

creationtimestamp| type| source ---|---|--- 2026-07-02 18:23:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mponnaa4652m 2026-07-03 21:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpriv4u3qs2y 2026-07-08 11:01:21+00:00| seen|...

CVE-2026-55114

creationtimestamp| type| source ---|---|--- 2026-07-02 18:18:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mponeajoqd2v 2026-07-03 07:05:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyayifuw27 2026-07-07 05:07:08+00:00| seen|...

CVE-2026-54404

creationtimestamp| type| source ---|---|--- 2026-07-02 18:16:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mponbkeuld2v 2026-07-03 19:51:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprczq72g72f 2026-07-08 11:01:21+00:00| seen|...

GHSA-2MJP-6Q6P-2QXM

creationtimestamp| type| source ---|---|--- 2026-07-02 16:42:16+00:00| seen| https://gist.github.com/konard/7292d01fd27ee78b9adfcdd581745d9e...

CVE-2026-56037

creationtimestamp| type| source ---|---|--- 2026-07-02 15:16:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpod7g7p552a...

CVE-2026-6902

creationtimestamp| type| source ---|---|--- 2026-07-02 15:13:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mpod2scxtv72...

CVE-2026-36912

creationtimestamp| type| source ---|---|--- 2026-07-02 14:29:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoalymrak2o 2026-07-03 09:00:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq6nlubk22m...

CVE-2026-54712

creationtimestamp| type| source ---|---|--- 2026-07-02 14:27:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoahe26gl2w 2026-07-03 09:15:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7i5u4ck2y 2026-07-29 20:31:26+00:00| seen|...

CVE-2026-54704

creationtimestamp| type| source ---|---|--- 2026-07-02 14:26:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoagu42pq2i 2026-07-03 09:28:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqa7twgj52w 2026-07-29 19:31:52+00:00| seen|...

CVE-2026-52186

creationtimestamp| type| source ---|---|--- 2026-07-02 14:25:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoaez6hty2i 2026-07-02 21:19:59+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoxjh46wi2i 2026-07-03 09:09:41+00:00| seen|...

PYSEC-2026-663 Uncontrolled Resource Consumption in Matrix Synapse

Impact Synapse before 1.52.0 with URL preview functionality enabled will attempt to generate URL previews for media stream URLs without properly limiting connection time. Connections will only be terminated after maxspidersize default: 10M bytes have been downloaded, which can in some cases lead ...

Open Redirect in CPython that affects users of OpenStack Nova

A vulnerability was found in CPython which is used by openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL...

PYSEC-2026-632 Cross-site scripting vulnerability in TinyMCE plugins

Impact A cross-site scripting XSS vulnerability was discovered in the URL processing logic of the image and link plugins. The vulnerability allowed arbitrary JavaScript execution when updating an image or link using a specially crafted URL. This issue only impacted users while editing and the...