CVE-2026-56398

creationtimestamp| type| source ---|---|--- 2026-07-15 15:47:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2z4ioe22u 2026-07-17 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqtunk4xan2u...

CVE-2026-58655

creationtimestamp| type| source ---|---|--- 2026-07-15 15:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2kzoz6t2s...

CERTFR-2026-ALE-006

creationtimestamp| type| source ---|---|--- 2026-07-15 14:21:07+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116924433303774121...

CVE-2025-62826

creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n...

CVE-2026-14354

creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow4t54qn2f 2026-07-29 16:03:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrscg7ehc52b...

CVE-2026-59235

creationtimestamp| type| source ---|---|--- 2026-07-15 13:50:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqouh5o35a2a...

CVE-2026-59236

creationtimestamp| type| source ---|---|--- 2026-07-15 13:40:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqotv6s2dw2n...

CVE-2026-8281

creationtimestamp| type| source ---|---|--- 2026-07-15 13:04:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqorvu4irb2i...

CVE-2026-47428

A flaw was found in Vitest, a testing framework. In Vitest Browser Mode, a remote attacker could craft a specific browser-runner URL that, when visited, would allow the execution of arbitrary JavaScript code within the Vitest server. This vulnerability could also lead to the recovery of the...

CVE-2026-48758

creationtimestamp| type| source ---|---|--- 2026-07-15 12:00:51+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqoodma5yp2c 2026-07-27 03:18:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlwq6g4by2n...

ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting XSS by providing untrusted input to the Address6 constructor. When an application renders the output of...

CVE-2026-15690

creationtimestamp| type| source ---|---|--- 2026-07-15 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqon5ostp52g 2026-07-21 08:49:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5ggyp73z27 2026-07-21 08:49:52+00:00| seen|...

EUVD-2026-44648

The Grav API plugin grav-plugin-api before 1.0.4 does not validate the origin of the client-supplied adminbaseurl field in the POST /api/v1/auth/forgot-password endpoint. The sanitizeHttpUrl function only checks that the URL scheme is http/https and never verifies the host against the server's ow...

CVE-2026-61451

The Grav API plugin grav-plugin-api before 1.0.4 does not validate the origin of the client-supplied adminbaseurl field in the POST /api/v1/auth/forgot-password endpoint. The sanitizeHttpUrl function only checks that the URL scheme is http/https and never verifies the host against the server's ow...

CVE-2026-56398

Open WebUI before 0.9.5 is vulnerable to stored XSS via the OAuth picture claim SVG data URI. The code infers MIME type from the URL extension (e.g., .svg) and ignores the server-provided Content-Type, then stores data URI labelling it as image/svg+xml. The profile image validator is bypassed in ...

CVE-2026-47992

creationtimestamp| type| source ---|---|--- 2026-07-15 10:18:35+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoimquynu2z...

CVE-2026-53486

A flaw was found in the decompress package for Node.js. A remote attacker can exploit this vulnerability by crafting a malicious archive. When the archive is extracted, it can create files and links outside the intended directory, leading to unauthorized reading or writing of files. This is due t...

CVE-2026-11579

creationtimestamp| type| source ---|---|--- 2026-07-15 08:28:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqoci4zafs2x...

CVE-2026-12512

creationtimestamp| type| source ---|---|--- 2026-07-15 08:18:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqobw65kbh2w 2026-07-15 12:00:10+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mqoocffj5p2e 2026-07-15 12:44:11+00:00| seen|...

CVE-2026-56287

creationtimestamp| type| source ---|---|--- 2026-07-15 07:00:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqo5leeaqi26 2026-07-15 13:05:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqorxo3uto2h 2026-07-21 00:07:06+00:00| seen|...