CVE-2026-40597

creationtimestamp| type| source ---|---|--- 2026-05-22 22:24:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxykfjqe2i 2026-06-06 11:02:53+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mnmiw2dm4a2l...

CVE-2026-40598

creationtimestamp| type| source ---|---|--- 2026-05-22 22:19:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxqruzhh2h...

CVE-2026-40864 JupyterHub: Cross-origin form POSTs bypass XSRF

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. In versions 4.1.0 through 5.4.4, XSRF protection updated in 4.1.0 inappropriately treated requests with Sec-Fetch-Mode: no-cors as same-origin requests, bypassing XSRF checks. The JSON API is not affecte...

CVE-2026-40864 JupyterHub: Cross-origin form POSTs bypass XSRF

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. In versions 4.1.0 through 5.4.4, XSRF protection updated in 4.1.0 inappropriately treated requests with Sec-Fetch-Mode: no-cors as same-origin requests, bypassing XSRF checks. The JSON API is not affecte...

CVE-2026-8992

creationtimestamp| type| source ---|---|--- 2026-05-22 17:44:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhieoeuxg2n 2026-05-27 10:06:39+00:00| seen| https://ccb.belgium.be/advisories/warning-ivanti-has-released-security-updates-address-vulnerabilities-affecting-several...

Malicious code in openmct-couch-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8eff366d17efa64bf8605941d009d01cf7a24aaf011af30faec449fc4a2e28 On npm install, the package's preinstall script runs node index.js and then curls the output of hostname && whoami to...

MAL-2026-4629 Malicious code in openmct-couch-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8eff366d17efa64bf8605941d009d01cf7a24aaf011af30faec449fc4a2e28 On npm install, the package's preinstall script runs node index.js and then curls the output of hostname && whoami to...

CVE-2026-7325

creationtimestamp| type| source ---|---|--- 2026-05-22 17:13:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhgn63lvp2q...

CVE-2026-9224

creationtimestamp| type| source ---|---|--- 2026-05-22 16:51:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhfflfuof2k...

CVE-2026-8477

creationtimestamp| type| source ---|---|--- 2026-05-22 16:48:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhfb3ysbe2p...

CVE-2026-9247

creationtimestamp| type| source ---|---|--- 2026-05-22 16:44:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhez4l46b2v...

Malicious Package

Overview polymarket-ai-agent is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-42502

creationtimestamp| type| source ---|---|--- 2026-05-22 16:38:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmheoytrrm2r 2026-06-01 15:38:41+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnafjazque2y...

CVE-2026-42506

creationtimestamp| type| source ---|---|--- 2026-05-22 16:35:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhej6i35b2c 2026-06-30 01:29:32+00:00| seen| https://gist.github.com/illoyd/2131d93f5933897a469738feaf75a3e9...

CVE-2026-0211

creationtimestamp| type| source ---|---|--- 2026-05-22 16:00:05+00:00| seen| https://t.me/GithubRedTeam/85414 2026-05-22 19:00:10+00:00| seen| Telegram/GxW7z8duNlVdfiWWsv41lYfs7S7xkZAHymlGuRAZQODzxg...

MAL-2026-4627 Malicious code in onboardconnect-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c17efe362ab4daf81f1ee7efe462a256ba325562a255906102d10d4a9ee87e5 The package's dist/setup.js script performs an HTTPS POST to https://oc-worker-tenant-api.wpolanco.workers.dev carrying values read from process.env,...

CVE-2026-30496

creationtimestamp| type| source ---|---|--- 2026-05-22 13:33:11+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mmh2cymjew2e...

CVE-2026-9277

creationtimestamp| type| source ---|---|--- 2026-05-22 13:22:55+00:00| published-proof-of-concept| https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p 2026-05-22 17:34:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhhsrhmds2o 2026-05-23 05:06:18+00:00...

CVE-2026-43490

creationtimestamp| type| source ---|---|--- 2026-05-22 13:05:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmgyri3mmq2x...

CVE-2026-43088

creationtimestamp| type| source ---|---|--- 2026-05-22 13:05:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmgyri3mmq2x 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...