GHSA-6VCH-Q96H-7GC3

creationtimestamp| type| source ---|---|--- 2026-07-24 23:31:23+00:00| seen| https://gist.github.com/alon710/c51377a7e449134a651b4b7f09b602f4 2026-07-25 00:00:18+00:00| seen| https://gist.github.com/alon710/c51377a7e449134a651b4b7f09b602f4...

CVE-2025-71408

creationtimestamp| type| source ---|---|--- 2026-07-24 23:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrghf4fvnp2q 2026-07-25 03:29:42+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrgwgrya5i23...

EUVD-2026-48299

AWS API MCP Server Security Policy Bypass via Startup Initialization Failure...

GHSA-7QJ2-Q5C8-CXX5 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-15308 vulnerabilities

Vulnerabilities for packages: python...

GHSA-W62V-XXXG-MG59 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-Q8WF-6R8G-63CH vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-P63J-VCC4-9VMV vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-M99W-X7HQ-7VFJ vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-C2J3-45GR-MQC4 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-4633-3J49-MH5Q vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-4C39-4CCG-62R3 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-64646 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-64641 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: apicurio-registry...

CVE-2026-62835

creationtimestamp| type| source ---|---|--- 2026-07-24 20:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrg6gmeec42a 2026-07-24 20:45:57+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/116976907530516421 2026-07-24 22:01:36+00:00| seen|...

CVE-2026-48021

In epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection between epa4all and the ePA backend can complete the VAU handshake with attacker-controlled keys and obtain the session encryption keys. All inner HTTP traffic patient consent decisions, medication data,...

CVE-2026-48037

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture. This issue has been patched in version 1.4.0...

CVE-2026-48037

CVE-2026-48037 affects Hulumi, specifically accounts using pre-1.4.0 AccountFoundation and related baseline components. The vulnerability arises from reuse paths that import existing AWS GuardDuty and Security Hub resources without verifying their operational status, allowing deployments to appea...

CVE-2026-48037 Hulumi: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture. This issue has been patched in version 1.4.0...