SUSE CVE-2026-52800

Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization team member management can be performed via GET requests without CSRF protection. If a victim who is an organization owner is logged in and is tricked into visiting a crafted link, an attacker-controlled user can be add...

SUSE CVE-2026-55187

Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...

SUSE CVE-2026-55671

ZITADEL is an open source identity management platform. From 4.0.0-rc.1 through 4.15.1, ZITADEL's HTTP notification channels, OIDC BackChannel Logout, and SAML metadata URL fetches do not consistently validate user-defined URLs against protected denylist handling, allowing server-side requests to...

CVE-2026-54722 dssrf: there a critical security bug with remove_at_symbol_in_string

DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, isurlsafe in src/helpers.ts strips the @ userinfo delimiter with removeatsymbolinstring before new URL parses the URL, allowing an attacker-controlled URL to bypass internal-IP...

CVE-2026-51273

creationtimestamp| type| source ---|---|--- 2026-07-30 16:02:04+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrussqexyq2m...

CVE-2026-44613

creationtimestamp| type| source ---|---|--- 2026-07-30 15:55:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7nmtzjyl3euyh 2026-08-07 07:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96984 2026-08-07 15:02:15+00:00| seen|...

CVE-2026-53431

creationtimestamp| type| source ---|---|--- 2026-07-30 15:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrurapjhtq2v...

GHSA-C9HR-64H3-GXPC

creationtimestamp| type| source ---|---|--- 2026-07-30 15:31:53+00:00| seen| https://gist.github.com/alon710/5c4b46a299dac54e7caa99802f7ad9a8...

CVE-2026-57862 Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP Notation

Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs. Attackers can submit hexadecimal-encoded internal IP addresses through the web link...

CVE-2026-56428

creationtimestamp| type| source ---|---|--- 2026-07-30 14:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cj3oxkjqienek...

CVE-2026-6879

creationtimestamp| type| source ---|---|--- 2026-07-30 14:20:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrun4lvoax2v...

react-router: React Router: Open Redirect vulnerability via backslashes in navigation components

A flaw was found in React Router, a routing library for React applications. A remote attacker could exploit this vulnerability by crafting a malicious link that uses backslashes within the or useNavigate components. This could lead to an Open Redirect, allowing the attacker to redirect users to...

react-router: React Router: Open Redirect vulnerability via backslashes in navigation components

A flaw was found in React Router, a routing library for React applications. A remote attacker could exploit this vulnerability by crafting a malicious link that uses backslashes within the or useNavigate components. This could lead to an Open Redirect, allowing the attacker to redirect users to...

CVE-2026-54363

creationtimestamp| type| source ---|---|--- 2026-07-30 13:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrukgjtuwq2i...

CVE-2026-22620

creationtimestamp| type| source ---|---|--- 2026-07-30 11:52:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d557ukhddnxri 2026-07-30 14:30:38+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrunp7jxzj2o...

GHSA-HW6G-J8V6-9HCM

creationtimestamp| type| source ---|---|--- 2026-07-30 08:32:07+00:00| seen| https://gist.github.com/alon710/d12f2b2b8a8eb557d027885a6580665a...

CVE-2026-51254

creationtimestamp| type| source ---|---|--- 2026-07-30 08:04:14+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrty4cruug2m...

CVE-2026-44104

creationtimestamp| type| source ---|---|--- 2026-07-30 08:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtxuuxerm22...

CVE-2026-44095

creationtimestamp| type| source ---|---|--- 2026-07-30 07:50:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3i7znk3io3uzz 2026-07-30 17:02:57+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mruw7lvvfr2v...

CVE-2026-7849

creationtimestamp| type| source ---|---|--- 2026-07-30 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrtw7uvfaf24 2026-07-30 08:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtxygfrej2v 2026-07-30 08:16:22+00:00| seen|...