CVE-2026-52797

creationtimestamp| type| source ---|---|--- 2026-06-24 22:27:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2xjwx3ej2f...

CVE-2026-45757

creationtimestamp| type| source ---|---|--- 2026-06-24 22:23:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2xdfcte427...

CVE-2026-48720

creationtimestamp| type| source ---|---|--- 2026-06-24 22:17:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2wyyhzc72i...

CVE-2026-57296

creationtimestamp| type| source ---|---|--- 2026-06-24 22:12:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2wpzqjvh2j...

CVE-2026-42450

creationtimestamp| type| source ---|---|--- 2026-06-24 22:02:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2w64k4ye2c...

CVE-2026-57301

creationtimestamp| type| source ---|---|--- 2026-06-24 21:41:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2uxprae32o 2026-07-01 01:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpkdbq6jqu2l...

CVE-2026-48719

creationtimestamp| type| source ---|---|--- 2026-06-24 21:30:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2uesniqb2l...

CVE-2026-47110 Tiptap for PHP < 2.1.1 DoS via Malformed href Attribute

Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to cause a denial of service by submitting Tiptap JSON with the attrs.href field set to an array instead of a string, causing an unhandled TypeError in the Link::isAllowedUri functio...

CVE-2026-47110

Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to cause a denial of service by submitting Tiptap JSON with the attrs.href field set to an array instead of a string, causing an unhandled TypeError in the Link::isAllowedUri functio...

CVE-2026-47110 Tiptap for PHP < 2.1.1 DoS via Malformed href Attribute

Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to cause a denial of service by submitting Tiptap JSON with the attrs.href field set to an array instead of a string, causing an unhandled TypeError in the Link::isAllowedUri functio...

CVE-2026-52800

Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization team member management can be performed via GET requests without CSRF protection. If a victim who is an organization owner is logged in and is tricked into visiting a crafted link, an attacker-controlled user can be add...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the repository migration process. An attacker can access internal resources and exfiltrate sensitive repository contents by submitting a crafted URL that redirects to an internal endpoint during...

CVE-2026-47733

Rocket.Chat CVE-2026-47733 affects the ImageElement in packages/gazzodown prior to 8.5.0, where user-controlled src values are inserted into and without protocol sanitization. An authenticated user can post markdown images with a javascript: URL that, on older browsers, could execute arbitrary ...

EUVD-2026-39069

Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization team member management can be performed via GET requests without CSRF protection. If a victim who is an organization owner is logged in and is tricked into visiting a crafted link, an attacker-controlled user can be add...

CVE-2026-12094

creationtimestamp| type| source ---|---|--- 2026-06-24 20:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp2q7ulukj2g...

CVE-2026-52798 Gogs: Stored XSS in `.ipynb` Preview

Gogs is an open source self-hosted Git service. Prior to 0.14.3, although .ipynb previews are sanitized on the server side via /-/api/sanitizeipynb, the inserted content is re-rendered on the client side without sanitization using marked on elements with the .nb-markdown-cell class. During this...

EUVD-2026-39065

Gogs is an open source self-hosted Git service. Prior to 0.14.3, specially crafted issue index pattern can cause a panic when rendering, resulting in denial of service. In internal/markup/markup.go, RenderIssueIndexPattern renders the issue index pattern to a link using com.Expand, which is not...

CVE-2020-35795

creationtimestamp| type| source ---|---|--- 2026-06-24 20:07:48+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2ppqpg3u2r...

CVE-2026-23879 py7zr: Arbitrary File Write Vulnerability

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Versions 1.1.2 and below contain an an arbitrary file write vulnerability, which allows symbolic links to be recreated outside the destination directory via crafted malicious...

CVE-2026-23879

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Versions 1.1.2 and below contain an an arbitrary file write vulnerability, which allows symbolic links to be recreated outside the destination directory via crafted malicious...