GHSA-FXHP-MV3V-67QP vulnerabilities

Vulnerabilities for packages: ratify, trivy-operator, gatekeeper, k8ssandra-client, rancher-fleet, oras, helm-operator, tigera-operator, opa, chartmuseum, consul-k8s, zot, headlamp, trivy, opa-envoy, argo-cd, helm, cilium-cli, conftest, linkerd2, zarf, kots, rancher, steampipe, rancher-agent,...

NATS Server: Route API Auth Bypass

...

NATS Server: Subscribe Authz Bypass via Wildcard-Overlap

...

CVE-2026-6801

creationtimestamp| type| source ---|---|--- 2026-07-11 07:35:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5nejffn2e 2026-07-11 08:02:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqe76hgzi22x...

CVE-2026-52761

A flaw was found in ModSecurity, an open-source web application firewall WAF. The t:utf8toUnicode transformation function, responsible for converting UTF-8 encoded characters to Unicode, generates incorrect output on i386 architectures. This vulnerability allows an attacker to bypass WAF rules,...

CVE-2026-10865

creationtimestamp| type| source ---|---|--- 2026-07-11 07:34:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5kutobe2i 2026-07-11 08:32:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqeatdoff72k...

CVE-2026-15155

creationtimestamp| type| source ---|---|--- 2026-07-11 07:32:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5imu2qi2e 2026-07-11 07:59:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqe6xqk3ap2g 2026-07-11 08:00:32+00:00| seen|...

CVE-2026-7544

creationtimestamp| type| source ---|---|--- 2026-07-11 04:42:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdtyx6tfl2y 2026-07-14 00:20:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkwqicxc52y 2026-07-16 08:14:06+00:00| seen|...

CVE-2026-13353

creationtimestamp| type| source ---|---|--- 2026-07-11 04:40:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdtuqz2qt27 2026-07-11 05:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqduyyvv3g25 2026-07-11 06:37:34+00:00| seen|...

SUSE CVE-2026-59858

Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entry, without escaping, into a :vimgrep pattern that is run through :execute. Because :vimgrep honor...

CVE-2026-49394

creationtimestamp| type| source ---|---|--- 2026-07-11 02:54:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdnxgp6ki2c...

CVE-2026-57212

creationtimestamp| type| source ---|---|--- 2026-07-11 02:29:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdmjxo5sz2y 2026-07-11 02:29:20+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqdmjxhqyy26 2026-07-13 23:20:17+00:00| seen|...

CVE-2026-57214

creationtimestamp| type| source ---|---|--- 2026-07-11 02:22:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdm6jv7ia2i 2026-07-13 23:46:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkutoggwx2s...

GHSA-QCQ2-496W-V96P vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, jupyter-base-notebook...

CVE-2026-52979

creationtimestamp| type| source ---|---|--- 2026-07-11 01:28:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdj4qollq2y...

CVE-2026-15293

creationtimestamp| type| source ---|---|--- 2026-07-11 00:52:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdh52eu3v2y 2026-07-12 19:01:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqhuh7g3ez2l...

CVE-2026-59217

creationtimestamp| type| source ---|---|--- 2026-07-11 00:34:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdg4fw5q22i...

EUVD-2026-43069

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting XSS. This issue affects Drupal Canvas versions: from 0.0.0 to 1.4.2, from 1.5.0 to 1.5.2, from 1.6.0 to 1.6.1, from 1.7.0 to 1.7.1...

CVE-2026-56668

creationtimestamp| type| source ---|---|--- 2026-07-11 00:25:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdfm6nrb62e 2026-07-11 18:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqfalk4a2i2w...

PT-2026-57486

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description Deserialization of untrusted data allows an unauthorized attacker to execute code over a network. Deserialization is the process of converting a data format, such as JSO...