CVE-2026-35272

...

CVE-2026-35275

Technical details about CVE-2026-35275 are not publicly available in the provided documents. Monitor for updates from Oracle security alerts and CVE records.

CVE-2026-35269

...

CVE-2026-35269

Technical details about CVE-2026-35269 are not publicly available in the provided documents. Monitor for updates from Oracle security alerts and CVE records.

CVE-2026-35267

Technical details about CVE-2026-35267 are not publicly available in the provided documents. Monitor for updates from Oracle security alerts and CVE records.

CVE-2026-35268

Technical details about CVE-2026-35268 are not publicly available in the provided documents. Monitor for updates; no affected products, vectors, or fixes are disclosed here.

CVE-2026-35263

Technical details are not publicly available in the provided documents. No product, vulnerable component, impact, or remediation information is disclosed. Monitor updates to CVE-2026-35263 for any released fixes or exploit information.

CVE-2026-35259

Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2026-35259 for affected products, impact, and fixes.

CVE-2026-35258

Technical details about CVE-2026-35258 are not provided in the supplied documents. Monitor for updates from the vendor/CVE database.

Deno: BYONM module resolution allows `package.json` main path traversal to bypass `--allow-read` restrictions

Summary When Deno was run in BYONM mode nodeModulesDir: "manual", the module resolver did not validate that a package's resolved entrypoint stayed within its nodemodules// directory. A malicious package.json whose main field contained .. segments was able to resolve to an arbitrary path on disk,...

GHSA-968W-XFQW-VP9Q Deno: BYONM module resolution allows `package.json` main path traversal to bypass `--allow-read` restrictions

Summary When Deno was run in BYONM mode nodeModulesDir: "manual", the module resolver did not validate that a package's resolved entrypoint stayed within its nodemodules// directory. A malicious package.json whose main field contained .. segments was able to resolve to an arbitrary path on disk,...

CVE-2026-39927

creationtimestamp| type| source ---|---|--- 2026-06-16 18:22:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogg4k3lfz2l...

CVE-2026-53862 OpenClaw < 2026.5.12 - Bootstrap Token Replay via Pending Pairing Scope Widening

OpenClaw before 2026.5.12 contains a bootstrap token replay vulnerability allowing callers with pending token access to reuse tokens with broader requested scopes. Attackers can replay bootstrap tokens before approval to escalate pairing authority beyond intended scope limits...

CVE-2026-53853 OpenClaw < 2026.5.12 - Argument Pattern Bypass in Exec Allowlist via Linux and macOS

OpenClaw before 2026.5.12 contains an argument pattern validation bypass in the exec allowlist that allows attackers to execute disallowed arguments for allowlisted executables on Linux and macOS systems. Attackers can bypass configured argPattern restrictions by directly invoking allowlisted...

CVE-2026-53437

creationtimestamp| type| source ---|---|--- 2026-06-16 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/jenkins-multiple-vulnerabilities20260617...

CVE-2024-39575

Technical details are not publicly available in the provided documents; monitor for updates.

CVE-2026-12003

creationtimestamp| type| source ---|---|--- 2026-06-16 17:42:32+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mogdvv6nl72p 2026-06-16 18:41:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogh75ee632m 2026-06-17 17:13:31+00:00| seen|...

GHSA-5XP3-2W67-427V n8n: Git Node Clone and Push Operations Bypass File Sandbox

Impact An authenticated user with permission to create or modify workflows could supply a local filesystem path as the source repository in the Git node's Clone operation, or as the target repository in the Push operation, bypassing the N8NRESTRICTFILEACCESSTO file sandbox. This allowed the...

CVE-2025-13036

creationtimestamp| type| source ---|---|--- 2026-06-16 17:35:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogdijmck32f 2026-06-18 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-169-03...

UBUNTU-CVE-2026-12003

To allow builds of Python to be run from an in-tree layout rather than an installed file layout, the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modules/setup.local. When this landmark is found relative to VPATH relative to the executable, Python...