118057 matches found
GHSA-M4HF-6VGR-75R2
creationtimestamp| type| source ---|---|--- 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b...
GHSA-2F54-P244-32Q6
creationtimestamp| type| source ---|---|--- 2026-08-05 12:32:01+00:00| seen| https://gist.github.com/alon710/2d05301b2f45169422f4602c106418b3...
CVE-2026-71259 ESPHome external_components file:// Scheme Validation Bypass Leading to Remote Code Execution
ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url validator in esphome/configvalidation.py. Because binds tighter than , any file: URI passes validation regardless of netloc. This validator gates the field of the externalcomponents YAML directive's git source schema,...
CVE-2026-71259
ESPHome (up to 2026.7.0-dev) is affected by an operator-precedence bug in the cv.url() validator within esphome/config_validation.py. The condition if parsed.scheme and parsed.netloc or parsed.scheme == "file" incorrectly permits file:// URIs to bypass validation, affecting the url: field of the ...
CVE-2026-71259 ESPHome external_components file:// Scheme Validation Bypass Leading to Remote Code Execution
ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url validator in esphome/configvalidation.py. Because binds tighter than , any file: URI passes validation regardless of netloc. This validator gates the field of the externalcomponents YAML directive's git source schema,...
CVE-2026-71259
ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url validator in esphome/configvalidation.py. Because binds tighter than , any file: URI passes validation regardless of netloc. This validator gates the field of the externalcomponents YAML directive's git source schema,...
CVE-2026-64581
creationtimestamp| type| source ---|---|--- 2026-08-05 12:15:26+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-64581 2026-09-04 12:35:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muoy24g4c32a...
CVE-2026-64576
creationtimestamp| type| source ---|---|--- 2026-08-05 12:15:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-64576 2026-08-12 20:45:52+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...
CVE-2026-64575
creationtimestamp| type| source ---|---|--- 2026-08-05 12:15:09+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-64575...
CVE-2026-16118
creationtimestamp| type| source ---|---|--- 2026-08-05 12:01:04+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msdi5cimtx2o 2026-08-12 12:01:25+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msv3gfjsoq2p...
CVE-2026-66883
creationtimestamp| type| source ---|---|--- 2026-08-05 11:39:40+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3msdgwzqghy2t...
CVE-2026-71248
creationtimestamp| type| source ---|---|--- 2026-08-05 11:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdgn3sdny23 2026-08-05 12:37:13+00:00| seen| https://bsky.app/profile/cybercod.bsky.social/post/3msdk5vqh5r2y...
CVE-2026-71238
creationtimestamp| type| source ---|---|--- 2026-08-05 11:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdgn2laot2o...
CVE-2026-71235
creationtimestamp| type| source ---|---|--- 2026-08-05 11:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdgjhttl322...
GHSA-2GX6-7GX2-WWCF
creationtimestamp| type| source ---|---|--- 2026-08-05 11:31:33+00:00| seen| https://gist.github.com/alon710/98861561e950349ba52fdd407f74f7c8...
CVE-2026-71231
creationtimestamp| type| source ---|---|--- 2026-08-05 11:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdgfwm5ur2f...
CVE-2026-25703
creationtimestamp| type| source ---|---|--- 2026-08-05 10:42:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/irqvimbknjzhj...
CVE-2026-0931
creationtimestamp| type| source ---|---|--- 2026-08-05 10:36:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cfyn44bprs4wo...
Leaked n8n API Tokens Exposed Live Instances to Credential Theft
GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could use them to access sensitive data and downstream credentials without exploiting a software vulnerability. We scanned public GitHub commits for exposed n...