CVE-2026-7558

creationtimestamp| type| source ---|---|--- 2026-07-09 23:10:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqxvy5mo2c...

CVE-2026-59269

creationtimestamp| type| source ---|---|--- 2026-07-09 23:09:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqupneqf2s 2026-07-10 03:34:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116893578077059959...

CVE-2026-31984

creationtimestamp| type| source ---|---|--- 2026-07-09 22:37:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqap4ausyc2w 2026-07-10 17:45:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcpajcdya2s 2026-07-11 07:37:07+00:00| seen|...

CVE-2026-31981

creationtimestamp| type| source ---|---|--- 2026-07-09 22:37:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqap3mupjq2d 2026-07-10 17:42:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcp37tmox2d...

CVE-2026-14342

creationtimestamp| type| source ---|---|--- 2026-07-09 22:36:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqap2iz3s32s...

CVE-2026-12418

creationtimestamp| type| source ---|---|--- 2026-07-09 22:35:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaoymz6fi2d...

CVE-2026-31983

creationtimestamp| type| source ---|---|--- 2026-07-09 22:34:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaoxiphid2s 2026-07-10 17:27:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcobkhby62f...

CVE-2026-13450

creationtimestamp| type| source ---|---|--- 2026-07-09 22:32:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaotjnlbc2a...

CVE-2026-31982

creationtimestamp| type| source ---|---|--- 2026-07-09 22:31:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaorjqils2e 2026-07-10 17:26:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcoa34a5y2y...

CVE-2026-12406

creationtimestamp| type| source ---|---|--- 2026-07-09 22:30:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaoqckz5u2z...

CVE-2026-57501

Summary: CVE-2026-57501 affects Zen, a Firefox-based browser. Before version 1.21.5b, the contextual actions “Open link in glance” and “Split link in new tab” could load a page-controlled link URL with the System principal rather than the originating page’s principal, allowing a malicious page to...

CVE-2026-57501 Zen: Context-menu "Open link in glance" / "Split link in new tab" loads a page-controlled link with the System principal, bypassing the web-content scheme restriction

Zen is a firefox-based browser. Prior to 1.21.5b, Zen's glance and split-view context-menu actions, Open link in glance and Split link in new tab, load a page-controlled link URL with the System principal instead of the originating page's principal, allowing a malicious web page to place a link t...

CVE-2026-57501 Zen: Context-menu "Open link in glance" / "Split link in new tab" loads a page-controlled link with the System principal, bypassing the web-content scheme restriction

Zen is a firefox-based browser. Prior to 1.21.5b, Zen's glance and split-view context-menu actions, Open link in glance and Split link in new tab, load a page-controlled link URL with the System principal instead of the originating page's principal, allowing a malicious web page to place a link t...

CVE-2026-55424

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a topic "featured link" was not sufficiently normalized and escaped before being rendered in the topic list, allowing a user who can set a featured link to inject JavaScript when default Content...

CVE-2026-39243

decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption. When processing hardlink entries type === 'link', the x.linkname field from the archive is passed directly to fs.link without validation index.js line 113. An...

GHSA-PX5M-H76G-P7P8

creationtimestamp| type| source ---|---|--- 2026-07-09 22:12:01+00:00| seen| https://gist.github.com/alon710/7957cb9c4dd6636892863390d2a98c29...

CVE-2026-55424

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a topic "featured link" was not sufficiently normalized and escaped before being rendered in the topic list, allowing a user who can set a featured link to inject JavaScript when default Content...

CVE-2026-55424 Discourse: Topic featured link susceptible to stored XSS

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a topic "featured link" was not sufficiently normalized and escaped before being rendered in the topic list, allowing a user who can set a featured link to inject JavaScript when default Content...

CVE-2026-55424

CVE-2026-55424 – Discourse topic featured link stored XSS . Discourse (open-source discussion platform) prior to versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5 allowed a mis-normalized/undescoped topic feature link to inject JavaScript when default Content Security Policy protections were mo...

CVE-2026-55424 Discourse: Topic featured link susceptible to stored XSS

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a topic "featured link" was not sufficiently normalized and escaped before being rendered in the topic list, allowing a user who can set a featured link to inject JavaScript when default Content...