CVE-2026-53378: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle The colorop state blob property handling had memory leaks during state duplication, destruction, and reset operations. The implementation failed to follow the...

CVE-2026-64092: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: fix tpvars reference leak in receiver shutdown The receiver shutdown timer handler, batadvtpreceivershutdown, is responsible for releasing the tpvars reference it holds. However, the existing logic for...

CVE-2026-64184: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: call missing memcgroupiterbreak damonsysfsmemcgpathtoid breaks memcgroupiter loop without calling memcgroupiterbreak. This leaks the cgroup reference. Fix the issue by calling memcgroupiterbreak before the...

ECHO-FAC5-2977-3A4E

Bulletin has no description...

ECHO-9AB7-5D26-2A8B

Bulletin has no description...

MINI-64FM-GRJV-2PG4

Bulletin has no description...

MINI-QVXG-F5FH-VJMM

Bulletin has no description...

MINI-C548-5FF4-CCFQ

Bulletin has no description...

MINI-PVXV-H53R-8RX2

Bulletin has no description...

MINI-38XQ-X7XG-F6HP

Bulletin has no description...

MINI-JC7F-8QMV-7HVH

Bulletin has no description...

ECHO-41DA-7BD5-F915

Bulletin has no description...

MINI-84FJ-8743-RR99

Bulletin has no description...

CVE-2026-54244

creationtimestamp| type| source ---|---|--- 2026-07-17 23:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquwsujrnt22...

GHSA-WXHM-2MQ7-7697 Prompty: Arbitrary file read via file reference expansion

Summary Prompty loaders expanded $file:... references in .prompty frontmatter without enforcing that the resolved path stayed within an authorized directory. An attacker-controlled prompt file could use path traversal or an absolute path to cause the host application to read files accessible to t...

Directory Traversal

Overview prompty is a Prompty is a new asset class and format for LLM prompts that aims to provide observability, understandability, and portability for developers. It includes spec, tooling, and a runtime. This Prompty runtime supports Python Affected versions of this package are vulnerable to...

Prompty: Arbitrary file read via file reference expansion

Summary Prompty loaders expanded $file:... references in .prompty frontmatter without enforcing that the resolved path stayed within an authorized directory. An attacker-controlled prompt file could use path traversal or an absolute path to cause the host application to read files accessible to t...

CVE-2026-14871

osTicket versions v1.18.3 and v1.17.7 contain a Broken Object Level Authorization BOLA leading to Insecure Direct Object Reference IDOR in the AJAX ticket-management subsystem...

CVE-2026-63307 Chat2DB < 5.3.0 Insecure Direct Object Reference via GET /api/connection/datasource

Chat2DB before 5.3.0 contains an insecure direct object reference vulnerability in the GET /api/connection/datasource/id endpoint. The handler calls dataSourceService.queryExistentid, ... without an ownership check and returns the decrypted password field, allowing any authenticated non-admin use...

CVE-2026-63307

Chat2DB before 5.3.0 contains an insecure direct object reference vulnerability in the GET /api/connection/datasource/id endpoint. The handler calls dataSourceService.queryExistentid, ... without an ownership check and returns the decrypted password field, allowing any authenticated non-admin use...