262011 matches found
CVE-2026-65602
creationtimestamp| type| source ---|---|--- 2026-08-05 22:32:39+00:00| seen| https://gist.github.com/alon710/8d9bdd08d5f9d0638cb7af9de6c94fc7 2026-08-05 22:35:09+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv 2026-08-06 00:00:18+00:00...
CVE-2026-71319
creationtimestamp| type| source ---|---|--- 2026-08-05 22:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msekiznbnx2z 2026-08-05 22:26:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3fsizpdnyrbkp 2026-08-05 23:01:06+00:00| seen|...
EUVD-2026-53649
Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key through /nuxtisland/ props into a dynamic component when vue.runtimeCompiler: true is enabled, causing template execution in the Nitro process. This issue is fixe...
@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +79 more potentially affected by CVE-2026-71318 via nuxt (>=3.1.2, <=3.21.8)
nuxt NPM version =3.1.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-71318 Source advisory: SNYK:JS-NUXT-18565118...
UBUNTU-CVE-2026-71309
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic does not correctly reject URL paths beginning with ../ in cmd/serve/restic/restic.go WithRemote, which accepts a leading parent path and pass...
@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +11 more potentially affected by CVE-2026-71315 via nuxt (>=4.4.7, <=4.5.0)
nuxt NPM version =4.4.7, =3.2.0, =1.13.12, =1.6.0-rc.3, =1.0.0-alpha.17, =1.0.0, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-71315 Source advisory: OSV:GHSA-HXVH-4H3W-PRP9...
CVE-2026-71315 Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)
Nuxt is an open-source web development framework for Vue.js. From 3.21.7 until 3.21.10 and 4.5.1, mixed-case routeRules keys can fail to match case-folded lookups when router.options.sensitive is false and drop appMiddleware authorization gates. This is caused by an incomplete fix for...
CVE-2026-15430
creationtimestamp| type| source ---|---|--- 2026-08-05 21:00:03+00:00| seen| Telegram/MD75k-cDFtv9LnjecJEQAz4SDttk4ZkvpNpcWsPC7HMdiM 2026-08-05 21:00:03+00:00| seen| Telegram/6p3PAYOSat3nZO9NlFWMr5GgoKupNTDZqtKSi9BnUGK1nd4 2026-08-06 00:00:09+00:00| published-proof-of-concept|...
GHSA-4VR5-P2GC-H23P rclone archive extract allows S3 destination prefix escape via crafted archive paths
Summary rclone archive extract can write extracted files outside the user-selected destination prefix when extracting a crafted archive. A malicious archive entry containing parent path components such as ../ can escape the requested extraction prefix and create or overwrite sibling objects in th...
EUVD-2026-44533
rclone serve restic --private-repos authorization bypass: .. in the URL path lets an authenticated user read, overwrite and delete other users' repositories...
CVE-2026-59881 vulnerabilities
Vulnerabilities for packages: airflow, py3-cassandra-medusa, kserve, open-webui, dask-kubernetes...
GHSA-MQ44-7P77-Q5H7 vulnerabilities
Vulnerabilities for packages: airflow, py3-cassandra-medusa, kserve, open-webui, dask-kubernetes...
GHSA-PWGG-JHVP-WR6H vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-GRFX-V4XP-4M33 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-M4VJ-4237-7QMX vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-PV4W-F6R6-3QCW vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-W7PH-97WC-Q2JR vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X4CW-WG5H-4QX6 vulnerabilities
Vulnerabilities for packages: chromium...