CVE-2026-55410

creationtimestamp| type| source ---|---|--- 2026-08-20 20:35:18+00:00| published-proof-of-concept| https://github.com/nocobase/nocobase/security/advisories/GHSA-p853-83gj-wjj3...

CVE-2026-61798

creationtimestamp| type| source ---|---|--- 2026-08-20 20:35:10+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2mc4-j865-9q4r...

CVE-2026-63202

creationtimestamp| type| source ---|---|--- 2026-08-20 20:35:03+00:00| published-proof-of-concept| https://github.com/netty/netty-incubator-codec-ohttp/security/advisories/GHSA-4899-mpch-38p3...

GO-2026-6093 vulnerabilities

Vulnerabilities for packages: localstack...

CVE-2026-54624

creationtimestamp| type| source ---|---|--- 2026-08-20 20:07:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/e7h75nllkvmwl...

USN-8543-2: Wget regression

USN-8543-1 fixed vulnerabilities in Wget. The update for CVE-2026-58472 was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Wget mishandled semicolons in the userinfo subcomponent of ...

CVE-2026-63385

creationtimestamp| type| source ---|---|--- 2026-08-20 19:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjzdqug2n2c 2026-08-20 20:07:55+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtk2dpdykp2p 2026-08-22 06:10:03+00:00| seen|...

CVE-2026-66785

creationtimestamp| type| source ---|---|--- 2026-08-20 19:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjxo5keg325 2026-08-20 20:08:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtk2fbjng72p 2026-08-20 21:00:45+00:00| seen|...

DEBIAN-CVE-2026-53585

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, gitdeltaapply in src/libgit2/delta.c trusts the attacker-controlled ressz value parsed by hdrsz from...

DEBIAN-CVE-2026-15743

Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable. The servestatic method always sets the Cache-Control header to "public", with no means of overriding it. This advises proxies that the content may be stored in a shared cache, and may be reused i...

CVE-2026-53424

creationtimestamp| type| source ---|---|--- 2026-08-20 19:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjx4cg2wl2j 2026-08-20 20:07:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtk2d66bz72e...

CVE-2026-76641

creationtimestamp| type| source ---|---|--- 2026-08-20 19:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjwlayjy62r...

net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

A flaw was found in the net/http/httputil package, specifically within the ReverseProxy component. This vulnerability allows the ReverseProxy to forward query parameters that are not visible to Rewrite functions. This occurs because the ReverseProxy does not correctly consider the url.ParseQuery...

CVE-2026-73256

creationtimestamp| type| source ---|---|--- 2026-08-20 18:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjvyie3f52c 2026-08-20 19:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjwlhlixg2r 2026-08-20 20:08:25+00:00| seen|...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.11: python3.11-3.11.16-1.hum1 aarch64, x8664 python3.11-debug-3.11.16-1.hum1 aarch64, x8664 python3.11-devel-3.11.16-1.hum1 aarch64, x8664 python3.11-idle-3.11.16-1.hum1 aarch64, x8664...

CVE-2026-14671

creationtimestamp| type| source ---|---|--- 2026-08-20 18:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtjvbcpnzu2x...

CVE-2026-75897

creationtimestamp| type| source ---|---|--- 2026-08-20 18:36:37+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mtjvagabjp2z...

CVE-2026-53584

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 does not reject traversal components in a submodule path loaded from .gitmodules. The affect...

DEBIAN-CVE-2026-73251

Mongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a TLS server to a Mongoose client configured with a multi-certificate CA bundle. In src/tlsbuiltin.c, the mgtlsinit function stores the bundle in tls-cabundleder while tls-cader.len remains...

MAL-2026-14331 Malicious code in exam-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cd95c1b59238861675a30a947648a2280420c11e53dcb4f8501db5cb736313 On any require/import of exam-kit, the main entry runs a top-level await that reads an out-of-package file at../../../../public/logo.ico, DES-decrypt...