EUVD-2026-24963

chmod: --preserve-root bypassed by any path that resolves to root e.g. /../...

CVE-2026-54269

creationtimestamp| type| source ---|---|--- 2026-07-06 07:58:49+00:00| seen| https://gist.github.com/alon710/85679449cb8fbdc65386d384f1841a0e 2026-07-06 07:59:30+00:00| seen| https://gist.github.com/alon710/e1c58c0e5e300cd65a71e5b861eaf325...

GHSA-F38Q-MGVJ-VPH7

creationtimestamp| type| source ---|---|--- 2026-07-06 07:58:49+00:00| seen| https://gist.github.com/alon710/85679449cb8fbdc65386d384f1841a0e 2026-07-06 07:59:30+00:00| seen| https://gist.github.com/alon710/e1c58c0e5e300cd65a71e5b861eaf325...

ROS-20260706-73-0027

The vulnerability of the pgbasebackup and pgrewind utilities in the PostgreSQL database management system is related to deficiencies in the mechanism for handling symbolic references. Exploiting this vulnerability allows a malicious actor to rewrite any files remotely...

CVE-2019-10954

creationtimestamp| type| source ---|---|--- 2026-07-05 23:58:39+00:00| seen| https://gist.github.com/HansBug/7d0884ae378f2f85ea1bb0aa04abe56d 2026-07-06 00:00:05+00:00| seen| https://gist.github.com/HansBug/7d0884ae378f2f85ea1bb0aa04abe56d 2026-07-06 00:06:10+00:00| seen|...

CVE-2026-57322

creationtimestamp| type| source ---|---|--- 2026-07-05 10:16:32+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpvdtuhers2u 2026-07-05 10:16:33+00:00| seen| https://bsky.app/profile/potato.software/post/3mpvdtvadpc2b...

GHSA-4PQ2-JH73-G3HW

creationtimestamp| type| source ---|---|--- 2026-07-05 00:00:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116864426613570439 2026-07-05 00:00:36+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpubgil3hs2b...

CVE-2026-5137

creationtimestamp| type| source ---|---|--- 2026-07-03 23:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mprohzoe242j 2026-07-03 23:46:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprq5zrrvf2f 2026-07-03 23:46:22+00:00| seen|...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the process handling Composer package source links. An attacker can gain unauthorized access to private or internal package source information by directly accessing these links...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the process handling Composer package source links. An attacker can gain unauthorized access to private or internal package source information by directly accessing these links...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the process handling Composer package source links. An attacker can gain unauthorized access to private or internal package source information by directly accessing these links...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the process handling Composer package source links. An attacker can gain unauthorized access to private or internal package source information by directly accessing these links...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature due to ambiguity in the HMAC validation of signed URLs used for artifact access. An attacker can gain unauthorized read access to artifacts across repositories and write to upload-state...

CVE-2026-27771

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...

CVE-2026-27771 Gitea Composer package source links use insufficient permission checks

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...

CVE-2026-27771 Gitea Composer package source links use insufficient permission checks

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...

CVE-2026-59092

creationtimestamp| type| source ---|---|--- 2026-07-03 15:05:40+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpqt322vpe2l 2026-07-03 15:09:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtcm3jca2n...

CVE-2026-13341

creationtimestamp| type| source ---|---|--- 2026-07-03 12:11:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpqjcqu2mf2r 2026-07-03 13:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116856286666318310 2026-07-03 13:30:31+00:00| seen|...

CVE-2026-50281

creationtimestamp| type| source ---|---|--- 2026-07-03 08:40:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq5kgd4zs2j 2026-07-03 09:34:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqalb4gdi26 2026-07-03 09:34:52+00:00| seen|...

CVE-2026-9725

creationtimestamp| type| source ---|---|--- 2026-07-03 05:58:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppuinqzrc24 2026-07-03 06:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116854516946886983 2026-07-03 06:00:27+00:00| seen|...