Mistune: Potential DoS via quadratic-time parsing in parse_link_text

...

Improper Link Resolution Before File Access

gogs.io/gogs is vulnerable to Improper Link Resolution Before File Access. The vulnerability is due to improper validation of symbolic links in the UploadRepoFiles function, which only checks the final upload target instead of every path component, allowing an attacker with repository write acces...

CVE-2026-13333

creationtimestamp| type| source ---|---|--- 2026-06-27 06:23:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpat3naxtl2b 2026-06-27 12:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpbgsco3gf2p 2026-06-29 19:22:59+00:00| seen|...

CVE-2025-59868

creationtimestamp| type| source ---|---|--- 2026-06-27 06:13:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpasjqg7vw23 2026-06-29 19:27:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7sohbnm2o 2026-06-29 19:27:02+00:00| seen|...

CVE-2026-13335

creationtimestamp| type| source ---|---|--- 2026-06-27 06:08:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpasaryma527 2026-06-27 11:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpbdgzpbvc2n 2026-06-29 19:24:25+00:00| seen|...

GHSA-WW5P-J6CJ-6MQQ

creationtimestamp| type| source ---|---|--- 2026-06-27 05:12:34+00:00| seen| https://gist.github.com/alon710/50034d243d8ecc5094ce95388ae028b5...

CVE-2025-60473

creationtimestamp| type| source ---|---|--- 2026-06-27 03:27:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpajbk7rxj23 2026-06-30 00:08:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphpjataxq2d...

CVE-2025-60474

creationtimestamp| type| source ---|---|--- 2026-06-27 03:17:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpaipm22hw2v 2026-06-30 00:08:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphpk4cuao27...

The vulnerability of the `ksmbd_session_lookup_all()` function in the `fs/smb/server/mgmt/user_session.c` module allows a hacker to cause a service failure within the SMB kernel of the Linux operating system.

The vulnerability of the ksmbdsessionlookupall function in the fs/smb/server/mgmt/usersession.c module of the SMB server kernel in Linux operating systems is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ublk_check_and_reset_active_ref() function in the drivers/block/ublk_drv.c module of the Linux kernel’s block devices driver allows a attacker to cause a service failure.

The vulnerability of the ublkcheckandresetactiveref function in the drivers/block/ublkdrv.c file, a driver for block devices in the Linux operating system, is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2026-52785

creationtimestamp| type| source ---|---|--- 2026-06-26 23:45:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpa4twxjql23 2026-06-28 19:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpenuzqf3u2x...

GHSA-4GXV-P5G5-J7W7

creationtimestamp| type| source ---|---|--- 2026-06-26 23:42:14+00:00| seen| https://gist.github.com/alon710/aef49efca881722a2606f374108f34f4 2026-06-27 00:00:58+00:00| seen| https://gist.github.com/alon710/aef49efca881722a2606f374108f34f4...

CVE-2026-52780

creationtimestamp| type| source ---|---|--- 2026-06-26 23:31:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpa42cxqt52c 2026-06-28 19:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpenvjmkmg2v...

CVE-2026-52783

creationtimestamp| type| source ---|---|--- 2026-06-26 23:27:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpa3tm22wn2s 2026-06-28 20:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mper7ufns52x 2026-06-29 14:45:10+00:00| seen|...

CVE-2026-0685

creationtimestamp| type| source ---|---|--- 2026-06-26 23:20:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpa3iaoqql2z...

CVE-2026-2611

creationtimestamp| type| source ---|---|--- 2026-06-26 23:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpa2pi4otw2t...

CVE-2026-54350

creationtimestamp| type| source ---|---|--- 2026-06-26 22:50:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7zrsqa4s2x 2026-06-27 20:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpcarllaqs2c 2026-06-29 19:21:10+00:00| seen|...

CVE-2026-46710

creationtimestamp| type| source ---|---|--- 2026-06-26 22:01:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7wzuqcse27 2026-06-29 14:43:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgpwzbige2o...

GHSA-985R-Q3QP-299H

creationtimestamp| type| source ---|---|--- 2026-06-26 21:42:10+00:00| seen| https://gist.github.com/alon710/e9c21cf2a4b3d2c5f2db0a4799f8c878 2026-07-14 01:00:05+00:00| seen| https://t.me/bdufstecru/3261 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3261...

CVE-2026-50132

Budibase is an open-source low-code platform. Prior to 3.39.0, GET /api/chat-links/:instance/:token/handoff is a public endpoint no auth required that performs a permanent, state-changing operation: it binds an external chat identity Slack/Discord/MS Teams to an authenticated Budibase user accoun...