PT-2026-65724

Apache Traffic Server does not reject Transfer-Encoding in HTTP/2 requests, allowing downgrade request smuggling. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4...

TencentOS Server 4: skopeo (TSSA-2026:0740)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0740 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

SUSE SLES12 Security Update : kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:3388-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3388-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues: The following security issues were fixed: -...

MiracleLinux 9 : vim-8.2.2637-26.el9_8.6.ML.1 (AXSA:2026-1386:19)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1386:19 advisory. vim: Vim: Command injection allows arbitrary code execution via malicious tag files CVE-2026-41411 Tenable has extracted the preceding description block...

GHSA-964W-F6GJ-5236

creationtimestamp| type| source ---|---|--- 2026-07-28 23:31:57+00:00| seen| https://gist.github.com/alon710/3d4b381ed70bde1d61201f63076c47f0 2026-07-29 00:00:29+00:00| seen| https://gist.github.com/alon710/3d4b381ed70bde1d61201f63076c47f0...

CVE-2026-54654

creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:44+00:00| published-proof-of-concept| https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-wjv6-jcfj-mf9r 2026-07-29 03:28:01+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrqy7iat4v2y...

CVE-2026-49447

creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:39+00:00| published-proof-of-concept| https://github.com/azukaar/Cosmos-Server/security/advisories/GHSA-5fqm-cc34-fcf5...

CVE-2026-49446

creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:37+00:00| published-proof-of-concept| https://github.com/azukaar/Cosmos-Server/security/advisories/GHSA-2rx5-2g7j-2659...

CVE-2026-55390

creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:32+00:00| published-proof-of-concept| https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-442q-2j6p-642g 2026-07-28 23:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqjc3tw4s2q...

CVE-2026-55403

creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:27+00:00| published-proof-of-concept| https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-r5vv-ff45-prp2 2026-07-29 00:00:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqmmvyow724...

CVE-2026-55415

creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:22+00:00| published-proof-of-concept| https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-5578-w22f-pfx9 2026-07-28 23:45:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqls2kthh2i...

CVE-2026-54656

creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:13+00:00| published-proof-of-concept| https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-8m8r-38jm-f355 2026-07-29 13:32:26+00:00| seen| https://gist.github.com/alon710/9d9829ba6ab40face903027898206e80...

CVE-2026-55391

creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:11+00:00| published-proof-of-concept| https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-vx7x-vcc2-c44g 2026-07-28 23:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqjccj7di2u...

CVE-2026-54653

creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:08+00:00| published-proof-of-concept| https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-386q-5hp3-95m9 2026-07-28 23:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqlhcj5h62q 2026-07-29...

Improper Neutralization of Special Elements Used in a Template Engine

Overview datamodel-code-generator is a Datamodel Code Generator Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the comment field in the --extra-template-data. An attacker can execute arbitrary Python code during import...

Improper Neutralization of Special Elements Used in a Template Engine

Overview datamodel-code-generator is a Datamodel Code Generator Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the defaultfactory field in schema input. An attacker can execute arbitrary Python code in the consumer's...

Arbitrary Code Injection

Overview datamodel-code-generator is a Datamodel Code Generator Affected versions of this package are vulnerable to Arbitrary Code Injection via the validators processing in the --extra-template-data file. An attacker can execute arbitrary code during module import by supplying specially crafted...

GHSA-V8VM-CQH8-Q87Q

creationtimestamp| type| source ---|---|--- 2026-07-28 21:31:27+00:00| seen| https://gist.github.com/alon710/f64be2d49b2d7a1297c03bef66babfa4...

firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: cubeb component...

firefox: thunderbird: Site isolation issue in the Graphics: WebRender component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics: WebRender component...