Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the UpdateSourceInventory and UpdateAgentStatus handlers due to insufficient validation of the sourceid claim in JSON Web Tokens against the requested source ID. An attacker can gain...

GHSA-V3QC-WRWX-J3PW

creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:23+00:00| seen| Telegram/OgOvWOsYKDsUPw2Tk2S9qGbonIgzDZlRsoTRSBtlTZ01pNI...

CVE-2026-39495

creationtimestamp| type| source ---|---|--- 2026-04-10 21:23:28+00:00| seen| Telegram/OQKBgo-nZL6sXwBX9bmjZlSNqFSsDAVUFOIG0ZNThQ0ug...

CVE-2025-68337

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning

Summary A cross-tenant authorization bypass in the knowledge base copy endpoint allows any authenticated user to clone duplicate another tenant’s knowledge base into their own tenant by knowing/guessing the source knowledge base ID. This enables bulk data exfiltration document/FAQ content across...

EUVD-2025-50814

Milvus Proxy has a Critical Authentication Bypass Vulnerability...

CVE-2025-11825

creationtimestamp| type| source ---|---|--- 2025-10-22 08:43:26+00:00| seen| Telegram/SsDVuiwrBfOdxxNqIsRSFjtYa3F8g76kp4UDScpJ2AJlPi0...

CVE-2025-11638

creationtimestamp| type| source ---|---|--- 2025-10-12 17:12:40+00:00| seen| Telegram/xElULPVX2bf6GHqPlJrc3Q20JsfWDe0Tqu8WkB5qIkSxS3Q...

CVE-2025-0664

creationtimestamp| type| source ---|---|--- 2025-09-09 20:56:44+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...

CVE-2025-7491

creationtimestamp| type| source ---|---|--- 2025-09-09 20:51:39+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...

CVE-2025-7564

creationtimestamp| type| source ---|---|--- 2025-09-09 20:51:38+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...

CVE-2025-53029

creationtimestamp| type| source ---|---|--- 2025-09-09 20:51:36+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...

CVE-2013-5056

creationtimestamp| type| source ---|---|--- 2025-08-31 03:13:15+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57 2026-07-29 12:01:23+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:53+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ...

CVE-2020-3745

creationtimestamp| type| source ---|---|--- 2025-08-31 03:13:05+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

GHSA-2CWW-FGMG-4JQC

creationtimestamp| type| source ---|---|--- 2025-08-27 13:18:23+00:00| seen| Telegram/QNXxFWPv8PJFuJt8s5Myjq4bU7gX8jREcoaoHIpHxoiI4...

CVE-2022-49495

creationtimestamp| type| source ---|---|--- 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-29903

creationtimestamp| type| source ---|---|--- 2025-08-13 13:26:34+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

CVE-2025-25747

creationtimestamp| type| source ---|---|--- 2025-08-13 13:26:34+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

CVE-2024-2493

creationtimestamp| type| source ---|---|--- 2025-08-12 13:33:28+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996 2025-08-21 03:19:29+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e996...

CVE-2025-45768

creationtimestamp| type| source ---|---|--- 2025-07-30 01:53:20+00:00| seen| https://gist.github.com/ZupeiNie/6f65e564f2067b876321d3dfdbb76569 2025-07-31 23:47:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvcd3qaw7i2e...