PYSEC-2026-3518 PraisonAI Slack app_mention bypasses configured user/channel authorization

PraisonAI Slack appmention bypasses configured user/channel authorization Summary PraisonAI's Slack bot applies its configured allowedusers, allowedchannels, and unknown-user pairing policy in the normal Slack message event handler, but not in the adjacent Slack appmention event handler. A Slack...

PYSEC-2026-3471 OpenStack Ironic allows Boot Script Injection

OpenStack Ironic through 35.0.x allows Boot Script Injection...

openjdk: OpenJDK: Improve certification checking (Oracle CPU 2026-07)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and...

CVE-2024-58330

creationtimestamp| type| source ---|---|--- 2026-07-23 11:23:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrcpxuab4o2v...

EUVD-2026-48085

Contributor Cross Site Scripting XSS in Virtue/Ascend/Pinnacle Toolkit = 4.9.12 versions...

ROOT-APP-PYPI-CVE-2026-28684 CVE-2026-28684 in rootio-python-dotenv - Patched by Root

Root has patched CVE-2026-28684 in the rootio-python-dotenv package for Root:PyPI. Multiple fixed versions available...

BELL-CVE-2026-53586

Bulletin has no description...

CVE-2026-65430

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...

RHSA-2026:43711 Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - ffmpeg

Bulletin has no description...

CVE-2026-65713

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

EUVD-2026-47898

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

CVE-2026-64873 Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services...

CVE-2026-65756

Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript...

CVE-2026-64799 Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions

Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This cou...

CVE-2026-65430

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...

CVE-2026-65430 Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...

CVE-2026-16723

creationtimestamp| type| source ---|---|--- 2026-07-23 08:46:26+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrch7ck5e62q 2026-07-23 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116968471131630189 2026-07-23 09:00:30+00:00| seen|...

GHSA-XVCM-6775-5M9R vulnerabilities

Vulnerabilities for packages: nextcloud-server, vitess, rancher-api-ui...

GHSA-VHCC-WFM4-93WW vulnerabilities

Vulnerabilities for packages: linux-gcp...

GHSA-HM4W-WWCW-MR6R vulnerabilities

Vulnerabilities for packages: mitmproxy, kubeflow-pipelines-fips, wazuh-manager, kubeflow, gitlab-cng, spamcheck, authentik, k8s-sidecar, awx, datadog-agent-fips, openstack-keystone-2025.1-fips, kubeflow-volumes-web-app, metaflow-service-fips, datahub-ingestion-fips, kubeflow-jupyter-web-app,...