CVE-2026-56852 affecting package jx for versions less than 3.10.182-5

CVE-2026-56852 affecting package jx for versions less than 3.10.182-5. A patched version of the package is available...

CVE-2026-56852 affecting package containerized-data-importer for versions less than 1.62.0-7

CVE-2026-56852 affecting package containerized-data-importer for versions less than 1.62.0-7. A patched version of the package is available...

CVE-2026-56852 affecting package azcopy for versions less than 10.25.1-7

CVE-2026-56852 affecting package azcopy for versions less than 10.25.1-7. A patched version of the package is available...

GHSA-55H5-XMCQ-C37V vulnerabilities

Vulnerabilities for packages: litellm...

GHSA-6R28-9PPF-4HJ5 vulnerabilities

Vulnerabilities for packages: calico, fq, cilium, telegraf...

CVE-2026-50642

A flaw was found in diff-so-fancy. The application does not properly sanitize non-SGR Select Graphic Rendition terminal control sequences, allowing other control characters and escape sequences to pass through. An attacker can embed malicious control sequences in filenames, diff metadata, or file...

CVE-2026-13268

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2026-54082

creationtimestamp| type| source ---|---|--- 2026-07-29 20:15:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-54082...

CVE-2026-65975 Pydantic AI AG-UI Adapter: A dangling client-submitted tool call can execute when a trailing message is dropped during `sanitize_messages`

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but not including 1.107.1 and 2.0.0b1 up to but not including 2.5.0, the UI adapters AG-UI via Agent.toagui/AGUIAdapter, and Vercel AI via VercelAIAdapter use...

CGA-V9XJ-H368-R4RJ

Bulletin has no description...

CVE-2026-67428

creationtimestamp| type| source ---|---|--- 2026-07-29 20:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrspokmwlf2g 2026-07-30 16:30:59+00:00| seen| https://gist.github.com/alon710/abbfb678b2ea15b959183e89124a0f42 2026-07-30 16:35:05+00:00| published-proof-of-concep...

CVE-2026-20316

creationtimestamp| type| source ---|---|--- 2026-07-29 19:35:50+00:00| seen| https://bsky.app/profile/cvesentinel.bsky.social/post/3mrsoc3g26k2u 2026-07-29 20:00:01+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8dc30cfa-6d78-4c95-8f53-cf5195768d7e...

MINI-XHFQ-HFV7-9G99

Bulletin has no description...

MINI-VGXM-F9Q7-2HXV

Bulletin has no description...

MINI-HV54-V5W6-XQ6J

Bulletin has no description...

MINI-4MW6-5G7W-VWHQ

Bulletin has no description...

MINI-PJCF-RGV5-W3MQ

Bulletin has no description...

CVE-2026-59083

A flaw was found in Apache Tomcat. This vulnerability, located in the rewrite valve, is due to improper handling of URL encoding hex encoding. A remote attacker could exploit this to bypass security constraints in certain configurations, potentially gaining unauthorized access or performing actio...

CVE-2026-67429

Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, image.download and related file-writing modules use caller-controlled outputdir instead of validatepathwithenvconfig and its FLYTOSANDBOXDIR confinement, allowing attacker-controlled response bytes to be...

EUVD-2026-50490

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...