CVE-2026-46713

Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, contain a vulnerability in the JSON-LD signature validation and compaction process that allows spoofed activities to be accepted as valid. This issue has been fixed in version 2026.5.4...

SUSE CVE-2026-55229

Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.34.0, Gotenberg's /forms/libreoffice/convert endpoint allows a specially crafted document to cause LibreOffice to automatically retrieve external HTTPS resources and local file resources during document conversion, enabling bli...

CVE-2026-64425

A flaw was found in the Linux kernel's iouring subsystem. This vulnerability allows linked work items to continue executing even after a system exit process has begun. This can lead to a denial of service by prolonging the exit sequence and potentially consuming system resources unexpectedly...

CVE-2026-51290

creationtimestamp| type| source ---|---|--- 2026-07-29 08:53:33+00:00| seen| https://gist.github.com/programmervuln/b9336a5d90ed38222932b37190e963e9 2026-07-30 19:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrv7rn5hx62r...

CVE-2026-11598

creationtimestamp| type| source ---|---|--- 2026-07-28 11:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpd4byovt22...

CVE-2026-14490

creationtimestamp| type| source ---|---|--- 2026-07-28 08:09:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mroxhfbgzj24...

SUSE CVE-2026-64425

In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: re-check IOWQBITEXIT for each linked work item commit 10dc95939817 "iouring/io-wq: check IOWQBITEXIT inside work run loop" fixed the obvious case where ioworkerhandlework took one exit-bit snapshot before draining...

MAL-2026-11071 Malicious code in whs4_eud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d906ecaf9f2ede0a31c6966b9d8402f4c80e57fb72eae7f9dfa1b3a7c583b8d4 The OpenSSF Package Analysis project identified 'whs4eud' @ 1.0.1 npm as malicious. It is considered malicious because: - The package communicat...

CVE-2026-64425

In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: re-check IOWQBITEXIT for each linked work item commit 10dc95939817 "iouring/io-wq: check IOWQBITEXIT inside work run loop" fixed the obvious case where ioworkerhandlework took one exit-bit snapshot before draining...

UBUNTU-CVE-2026-64425

In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: re-check IOWQBITEXIT for each linked work item commit 10dc95939817 "iouring/io-wq: check IOWQBITEXIT inside work run loop" fixed the obvious case where ioworkerhandlework took one exit-bit snapshot before draining...

CVE-2026-64425 io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item

In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: re-check IOWQBITEXIT for each linked work item commit 10dc95939817 "iouring/io-wq: check IOWQBITEXIT inside work run loop" fixed the obvious case where ioworkerhandlework took one exit-bit snapshot before draining...

EUVD-2026-48769

In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: re-check IOWQBITEXIT for each linked work item commit 10dc95939817 "iouring/io-wq: check IOWQBITEXIT inside work run loop" fixed the obvious case where ioworkerhandlework took one exit-bit snapshot before draining...

CVE-2026-64425

In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: re-check IOWQBITEXIT for each linked work item commit 10dc95939817 "iouring/io-wq: check IOWQBITEXIT inside work run loop" fixed the obvious case where ioworkerhandlework took one exit-bit snapshot before draining...

CVE-2026-64425

CVE-2026-64425 affects the Linux kernel io_uring/io-wq component. The vulnerability arises from where io_worker_handle_work() snapshots IO_WQ_BIT_EXIT and only later re-checks it inside the outer work loop, allowing linked work items to run after exit has begun if IO_WQ_BIT_EXIT is set post-start...

PT-2026-64646

In the Linux kernel, the following vulnerability has been resolved: io uring/io-wq: re-check IO WQ BIT EXIT for each linked work item commit 10dc95939817 "io uring/io-wq: check IO WQ BIT EXIT inside work run loop" fixed the obvious case where io worker handle work took one exit-bit snapshot befor...

CVE-2026-55969

creationtimestamp| type| source ---|---|--- 2026-07-24 23:17:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgie47v7k24 2026-07-28 17:22:13+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/apache-security-advisory-av26-749 2026-07-29 01:07:08+00:00| seen|...

CVE-2025-50325

creationtimestamp| type| source ---|---|--- 2026-07-22 21:50:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbckykckj2g...

CVE-2026-13321

creationtimestamp| type| source ---|---|--- 2026-07-22 16:47:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrarlpzzf32u 2026-07-22 16:49:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrarpynzcg2x 2026-07-22 19:01:40+00:00| seen|...

CVE-2026-39385

CVE-2026-39385 — Frappe LMS : Open-source LMS with a vulnerability in versions ≤ 2.51.0 where a user could bypass course payment validation by using an unrelated batch. Root cause: enrollment validation did not require the batch to be linked to the corresponding course. Impact: potential unauthor...

CVE-2026-39385 Frappe LMS enrollment bypass in paid courses via unrelated batch

Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment validation for courses by using unrelated batch. This has been patched in 2.52.0 with enrollment now validating that the batch is linked to course...