compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal

Summary The compliance-trestle library's profile import mechanism resolves trestle:// URIs and relative file paths by joining them with trestleroot and calling .resolve, but performs no boundary check to ensure the resolved path stays within the trestle workspace. An attacker can craft a maliciou...

Directory Traversal

Overview compliance-trestle is a Tools to manage & autogenerate python objects representing the OSCAL layers/models Affected versions of this package are vulnerable to Directory Traversal via the profile import mechanism. An attacker can read arbitrary files on the server filesystem by supplying ...

GHSA-MJ4X-VF5C-5XG8 compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal

Summary The compliance-trestle library's profile import mechanism resolves trestle:// URIs and relative file paths by joining them with trestleroot and calling .resolve, but performs no boundary check to ensure the resolved path stays within the trestle workspace. An attacker can craft a maliciou...

CVE-2026-48156

creationtimestamp| type| source ---|---|--- 2026-05-28 17:30:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwkejpygx2o...

CVE-2026-48155

creationtimestamp| type| source ---|---|--- 2026-05-28 17:26:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwk6k2inb2p...

CVE-2026-48524

creationtimestamp| type| source ---|---|--- 2026-05-28 17:18:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwjprwno32c 2026-06-15 17:41:21+00:00| seen| https://gist.github.com/alon710/1f95260cf4713d452e9aa65f49fefae4 2026-06-15 23:21:16+00:00| seen|...

CVE-2026-45017

creationtimestamp| type| source ---|---|--- 2026-05-28 17:12:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwje74zcu2q...

CVE-2026-47762

creationtimestamp| type| source ---|---|--- 2026-05-28 17:02:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwitepmxs2r 2026-05-28 17:02:51+00:00| seen| https://bsky.app/profile/potato.software/post/3mmwitfsqyw2t 2026-05-28 17:16:24+00:00| seen|...

Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

Threat actors are continuing to exploit a critical, now-patched security flaw impacting FortiClient Endpoint Management Server EMS deployments to deliver a credential-stealing malware family dubbed EKZ Infostealer. "The campaign abused trusted endpoint management infrastructure to deliver malware...

CVE-2026-9227

creationtimestamp| type| source ---|---|--- 2026-05-28 12:03:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvy3kradz2n 2026-05-28 16:01:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwffy2zzt2w...

CVE-2024-47097

creationtimestamp| type| source ---|---|--- 2026-05-28 11:58:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvxsm7e2o2e...

CVE-2026-8682

creationtimestamp| type| source ---|---|--- 2026-05-28 11:53:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvxjnpgei2i...

CVE-2026-7660

creationtimestamp| type| source ---|---|--- 2026-05-28 11:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvwsbye3v2i...

CVE-2026-32998

creationtimestamp| type| source ---|---|--- 2026-05-28 11:35:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmvwjm3pbf2b 2026-06-23 13:28:16+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3moxixmwixc2n...

CVE-2026-8716

creationtimestamp| type| source ---|---|--- 2026-05-28 11:35:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmvwjfgzfg2c...

CVE-2026-6713

creationtimestamp| type| source ---|---|--- 2026-05-28 11:35:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmvwjfgzfg2c...

CVE-2026-6226

creationtimestamp| type| source ---|---|--- 2026-05-28 11:20:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvvpnioo32h 2026-05-28 15:01:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwc2spmm72r...

CVE-2024-47096

creationtimestamp| type| source ---|---|--- 2026-05-28 11:06:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvuw2xunp2i...

CVE-2026-9807

creationtimestamp| type| source ---|---|--- 2026-05-28 10:59:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvujepc6v2p...

CVE-2026-9673

creationtimestamp| type| source ---|---|--- 2026-05-28 07:43:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvjlvvqlf2q...