CVE-2026-69153 PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker can cause PreviousMap.loadFile to read an unintended source-map file by supplying an absolute or directory-traversal...

CVE-2026-69153

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker can cause PreviousMap.loadFile to read an unintended source-map file by supplying an absolute or directory-traversal...

CVE-2026-69153

CVE-2026-69153 (PostCSS) affects PostCSS prior to 8.5.19. If the option from is unset, an attacker can cause PreviousMap.loadFile() to read an unintended source-map file by supplying an absolute or directory-traversal sourceMappingURL, exposing the map’s sources and sourcesContent. The issue is f...

akto v2.15.7

Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...

CVE-2026-69149

creationtimestamp| type| source ---|---|--- 2026-08-03 16:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6xhtypny2p 2026-08-03 18:14:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5nwaq22vg5q3w 2026-08-05 02:26:04+00:00| seen|...

CVE-2026-68945

creationtimestamp| type| source ---|---|--- 2026-08-03 16:32:48+00:00| seen| https://gist.github.com/alon710/73fc02db3c552514344a681ca47f8151 2026-08-03 18:08:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/76ddsj6kowu3a...

GHSA-JHPW-976M-542J

creationtimestamp| type| source ---|---|--- 2026-08-03 16:32:48+00:00| seen| https://gist.github.com/alon710/73fc02db3c552514344a681ca47f8151...

K000162730: Handlebars JavaScript templating engine vulnerability CVE-2021-23383

Security Advisory Description The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source. CVE-2021-23383 Impact There is no impact; F5 products are not affected by this vulnerability...

CVE-2026-12935

creationtimestamp| type| source ---|---|--- 2026-08-03 15:16:34+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3ms6s522ink2x...

CVE-2026-68587

creationtimestamp| type| source ---|---|--- 2026-08-03 14:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6r3yur7p2b 2026-09-03 22:35:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-69mh-gvh4-8gp7 2026-09-04 15:31:59+00:00| seen|...

CVE-2026-68584

creationtimestamp| type| source ---|---|--- 2026-08-03 14:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6qyg64yp2u 2026-09-03 22:31:26+00:00| seen| https://gist.github.com/alon710/4d2d0e14cc9fbf8c2c4ec8fd41b0edff 2026-09-08 20:35:24+00:00| published-proof-of-concept|...

CVE-2026-18642

creationtimestamp| type| source ---|---|--- 2026-08-03 14:24:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/im4yblmc4tj4t...

CVE-2026-67608

creationtimestamp| type| source ---|---|--- 2026-08-03 14:22:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jmbxd5vat537y...

CVE-2026-64827

creationtimestamp| type| source ---|---|--- 2026-08-03 14:16:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/355ijrasd4dlj...

CVE-2026-18092

creationtimestamp| type| source ---|---|--- 2026-08-03 14:10:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4tbihl57xlgja 2026-08-07 20:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msjfvvu7wb2x...

CVE-2026-18601

creationtimestamp| type| source ---|---|--- 2026-08-03 13:46:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6n3btsgp2h 2026-08-04 16:00:44+00:00| seen|...

CVE-2026-18574

creationtimestamp| type| source ---|---|--- 2026-08-03 13:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/117031818277568421 2026-08-03 13:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6n3aody32l 2026-08-03 16:15:49+00:00| seen|...

CVE-2026-8793

creationtimestamp| type| source ---|---|--- 2026-08-03 12:50:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ms6jxjcufv2l 2026-08-17 18:00:07+00:00| seen| Telegram/TuDwnrWh4mpGIaa9e8OcRyABnADuhXoMh9pqZJowOjcczY 2026-08-18 00:00:08+00:00| published-proof-of-concept|...

CVE-2026-58062

creationtimestamp| type| source ---|---|--- 2026-08-03 12:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6jtjhgyp2l 2026-08-03 20:58:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7f7p43zj2p 2026-08-04 09:28:18+00:00| seen|...

CVE-2026-56852

creationtimestamp| type| source ---|---|--- 2026-08-03 12:03:59+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3ms6hejb7hx2j 2026-08-05 22:37:18+00:00| seen| https://gist.github.com/cwayne18/5a965b20d5d77b66faec2e6e18802a48 2026-08-06 00:00:18+00:00| seen|...