CVE-2026-55886 Jodit Editor: Prototype Pollution in Jodit via Jodit.modules.Helpers.set()

Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities. Versions prior to 4.12.26 are vulnerable to Prototype Pollution through Jodit.modules.Helpers.setchain, value, obj, which walks the dot-separated chain, creating and following each path segment...

GHSA-C8JX-96C9-8XRP SurrealDB: Field-level SELECT permissions bypassed via indexed COUNT fast paths

A record user could learn the value of a hidden field by counting how many records match a guess. When DEFINE FIELD ... PERMISSIONS FOR select WHERE ... hides a field's contents from a caller, and that field is indexed, running SELECT count FROM t WHERE hiddenfield = "guess" GROUP ALL returned a...

CVE-2026-33413 vulnerabilities

Vulnerabilities for packages: juicefs, etcd...

GHSA-MFF6-FP66-7VRP vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-RWCR-6886-9VFQ vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-XC8J-MR73-M6WV vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-37WM-H7XG-Q6W9 vulnerabilities

Vulnerabilities for packages: firefox-esr...

CVE-2024-4775 vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-PW8J-6XCP-C453 vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-29FM-4HPP-5P7G vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-X73F-6QWM-HH3X vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-7HW4-X97Q-5WX2 vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-JHCJ-V5HX-PRGH vulnerabilities

Vulnerabilities for packages: firefox-esr...

CVE-2023-6860 vulnerabilities

Vulnerabilities for packages: firefox-esr...

CVE-2023-6867 vulnerabilities

Vulnerabilities for packages: firefox-esr...

CVE-2026-55510

creationtimestamp| type| source ---|---|--- 2026-07-01 20:05:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmcuixr5u2q 2026-07-02 11:56:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnxz7kr5g2w 2026-07-03 13:25:03+00:00| seen|...

CVE-2026-13879

creationtimestamp| type| source ---|---|--- 2026-07-01 19:59:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmckvnwbg2i 2026-07-02 07:22:09+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:17:42+00:00| seen|...

CVE-2026-13808

creationtimestamp| type| source ---|---|--- 2026-07-01 19:58:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmcj2exul2b 2026-07-02 01:10:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmtwdsjug2b 2026-07-02 07:19:21+00:00| seen|...

sigstore-js has Insufficient Verification of Data Authenticity

sigstore-js derives a transparency-log timestamp from tlogEntries.integratedTime and uses it to validate certificate validity windows and satisfy timestampThreshold. For bundle v0.2, a tlog entry can be inclusionProof-only no signed inclusionPromise/set, and the inclusion proof path does not...

CVE-2026-13812

creationtimestamp| type| source ---|---|--- 2026-07-01 19:50:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbzmsevo2t 2026-07-02 01:30:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmv27cvmp2b 2026-07-02 07:19:30+00:00| seen|...