GO-2026-5975 Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions in github.com/SpectoLabs/hoverfly

Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions in github.com/SpectoLabs/hoverfly...

CVE-2026-9103

creationtimestamp| type| source ---|---|--- 2026-07-17 19:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquhsueppf2r 2026-07-17 19:56:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujujfe3s2s 2026-07-17 20:00:44+00:00| seen|...

CVE-2026-9585

creationtimestamp| type| source ---|---|--- 2026-07-17 19:18:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquhpfzgv32j...

CVE-2026-57860

creationtimestamp| type| source ---|---|--- 2026-07-17 19:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqugukc3jo2o 2026-07-19 08:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqycskfyak2f...

CVE-2026-12715

creationtimestamp| type| source ---|---|--- 2026-07-17 18:29:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqueythh4l2g...

Allocation of Resources Without Limits or Throttling

Overview mcp is a The official Ruby SDK for Model Context Protocol servers and clients Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the handlepost method of lib/mcp/server/transports/streamablehttptransport.rb, which reads the entire...

CVE-2026-51083

creationtimestamp| type| source ---|---|--- 2026-07-17 18:15:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mque7ahppv2e...

CVE-2026-16089

creationtimestamp| type| source ---|---|--- 2026-07-17 18:00:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquddqpw7u24...

CVE-2026-9592

creationtimestamp| type| source ---|---|--- 2026-07-17 17:48:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqucono4e72s...

CVE-2026-47867

creationtimestamp| type| source ---|---|--- 2026-07-17 16:03:47+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mqu4ttfbde2i 2026-07-17 16:15:23+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712 2026-07-18 10:00:42+00:00| seen|...

CVE-2026-63097 Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposure

Dendrite through 0.13.8 contains an improper access control vulnerability in the syncapi /context endpoint syncapi/routing/context.go that allows authenticated local users to access post-leave room state events by exploiting a flawed membership check that evaluates only the RoomExists field while...

EUVD-2026-45195

Dendrite through 0.13.8 contains an improper access control vulnerability in the syncapi /context endpoint syncapi/routing/context.go that allows authenticated local users to access post-leave room state events by exploiting a flawed membership check that evaluates only the RoomExists field while...

CVE-2026-63097 Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposure

Dendrite through 0.13.8 contains an improper access control vulnerability in the syncapi /context endpoint syncapi/routing/context.go that allows authenticated local users to access post-leave room state events by exploiting a flawed membership check that evaluates only the RoomExists field while...

CVE-2026-63097 Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposure

Dendrite through 0.13.8 contains an improper access control vulnerability in the syncapi /context endpoint syncapi/routing/context.go that allows authenticated local users to access post-leave room state events by exploiting a flawed membership check that evaluates only the RoomExists field while...

CVE-2026-63097

Dendrite 0.13.8 is affected by an improper access-control in the syncapi /context endpoint (syncapi/routing/context.go). The flaw uses a flawed membership check that only considers RoomExists, ignoring IsInRoom, HasBeenInRoom, and Membership fields, allowing authenticated local users who have lef...

CVE-2026-63093

creationtimestamp| type| source ---|---|--- 2026-07-17 15:16:22+00:00| seen| https://bsky.app/profile/suriq.io/post/3mqu272jdvo24 2026-07-17 18:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqufkqdbbk2x 2026-07-19 10:01:08+00:00| seen|...

CVE-2026-15943

creationtimestamp| type| source ---|---|--- 2026-07-17 14:40:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqty7cut4t27 2026-07-18 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqw6kh5sgv2j...

CVE-2026-16013

creationtimestamp| type| source ---|---|--- 2026-07-17 14:35:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtxweafkp2s...

CVE-2026-7189

creationtimestamp| type| source ---|---|--- 2026-07-17 14:19:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtwyzep3z2x 2026-07-19 12:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyq7bpmry2q...

CVE-2026-7488

creationtimestamp| type| source ---|---|--- 2026-07-17 14:18:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtwx7rdsf24 2026-07-19 11:00:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqymt5k3yy2l...