CVE-2026-57168

creationtimestamp| type| source ---|---|--- 2026-07-02 22:35:13+00:00| published-proof-of-concept| https://github.com/openremote/openremote/security/advisories/GHSA-h3m5-97jq-qjrf...

CVE-2026-52817

creationtimestamp| type| source ---|---|--- 2026-07-02 22:35:11+00:00| published-proof-of-concept| https://github.com/Linuxfabrik/monitoring-plugins/security/advisories/GHSA-8w6w-23mq-h8rg...

CVE-2026-52834

creationtimestamp| type| source ---|---|--- 2026-07-02 22:35:09+00:00| published-proof-of-concept| https://github.com/tirr-c/jxl-oxide/security/advisories/GHSA-5pmv-rx8r-wmv5...

CVE-2026-52792

creationtimestamp| type| source ---|---|--- 2026-07-02 22:35:07+00:00| published-proof-of-concept| https://github.com/xyproto/algernon/security/advisories/GHSA-mm6c-5j6x-hq8m...

CVE-2026-54617

creationtimestamp| type| source ---|---|--- 2026-07-02 22:35:04+00:00| published-proof-of-concept| https://github.com/GravitLauncher/Launcher/security/advisories/GHSA-5g75-477j-2c2f 2026-07-03 21:56:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mprjywsdgq2e...

CVE-2026-49352

creationtimestamp| type| source ---|---|--- 2026-07-02 22:35:02+00:00| published-proof-of-concept| https://github.com/decolua/9router/security/advisories/GHSA-jphh-m39h-6gwx 2026-07-03 21:58:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mprk4i62nu2j 2026-07-13 22:00:10+00:0...

CVE-2026-49852

creationtimestamp| type| source ---|---|--- 2026-07-02 20:35:04+00:00| published-proof-of-concept| https://github.com/authlib/joserfc/security/advisories/GHSA-gg9x-qcx2-xmrh 2026-07-17 22:08:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqur7v4av42e...

CVE-2026-49254

creationtimestamp| type| source ---|---|--- 2026-07-02 20:35:02+00:00| published-proof-of-concept| https://github.com/dragonflyoss/dragonfly/security/advisories/GHSA-4q9j-6299-gxmr...

CVE-2026-50185

creationtimestamp| type| source ---|---|--- 2026-07-02 18:35:14+00:00| published-proof-of-concept| https://github.com/RustCrypto/utils/security/advisories/GHSA-3rjw-m598-pq24 2026-07-17 20:44:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqumkeqp7424...

CVE-2026-50192

creationtimestamp| type| source ---|---|--- 2026-07-02 18:35:11+00:00| published-proof-of-concept| https://github.com/kerberos-io/agent/security/advisories/GHSA-h5gx-45rj-2h5j...

CVE-2026-50181

creationtimestamp| type| source ---|---|--- 2026-07-02 18:35:09+00:00| published-proof-of-concept| https://github.com/langroid/langroid/security/advisories/GHSA-fg23-3346-88f5 2026-07-13 22:00:06+00:00| seen| https://t.me/GithubRedTeam/92599 2026-07-14 00:00:10+00:00| seen|...

CVE-2026-50180

creationtimestamp| type| source ---|---|--- 2026-07-02 18:35:07+00:00| published-proof-of-concept| https://github.com/langroid/langroid/security/advisories/GHSA-pmch-g965-grmr 2026-07-10 02:52:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqb5e3hzmq2l...

CVE-2026-52854

creationtimestamp| type| source ---|---|--- 2026-07-02 18:35:02+00:00| published-proof-of-concept| https://github.com/ProfessionalWiki/Maps/security/advisories/GHSA-4h7g-5542-v3fc 2026-08-18 23:02:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtfd56wys52r 2026-08-19...

CVE-2026-50027

creationtimestamp| type| source ---|---|--- 2026-07-02 16:35:08+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-84hp-mqvj-3p8h 2026-07-03 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116853809243699371 2026-07-03 21:40:08+00:00| seen|...

CVE-2026-54431

In liboauth2 the Demonstrating Proof-of-Possession DPoP verifier accepts a proof whose JSON Web Key jwk header contains private key material. RFC 9449 section 4.3 step 7 requires the verifier to reject such a proof but oauth2tokenverify function returns success for a malformed DPoP proof that...

UBUNTU-CVE-2026-54431

In liboauth2 the Demonstrating Proof-of-Possession DPoP verifier accepts a proof whose JSON Web Key jwk header contains private key material. RFC 9449 section 4.3 step 7 requires the verifier to reject such a proof but oauth2tokenverify function returns success for a malformed DPoP proof that...

CVE-2026-54431

CVE-2026-54431 affects the liboauth2 DPoP verifier. The bug allows a DPoP proof whose JWK header embeds private key material to be accepted, violating RFC 9449 section 4.3 step 7, because the function oauth2_token_verify() returns success for a malformed DPoP proof that embeds the private EC key ...

CVE-2026-54431

In liboauth2 the Demonstrating Proof-of-Possession DPoP verifier accepts a proof whose JSON Web Key jwk header contains private key material. RFC 9449 section 4.3 step 7 requires the verifier to reject such a proof but oauth2tokenverify function returns success for a malformed DPoP proof that...

CVE-2026-54431 Improper Data Validation in liboauth2

In liboauth2 the Demonstrating Proof-of-Possession DPoP verifier accepts a proof whose JSON Web Key jwk header contains private key material. RFC 9449 section 4.3 step 7 requires the verifier to reject such a proof but oauth2tokenverify function returns success for a malformed DPoP proof that...

EUVD-2026-41277

In liboauth2 the Demonstrating Proof-of-Possession DPoP verifier accepts a proof whose JSON Web Key jwk header contains private key material. RFC 9449 section 4.3 step 7 requires the verifier to reject such a proof but oauth2tokenverify function returns success for a malformed DPoP proof that...