NPM: PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments

NPM: PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments vulnerability discovered by ? in WordPress Npm postcss versions = 8.5.11...

Directory Traversal

Overview postcss is a PostCSS is a tool for transforming styles with JS plugins. Affected versions of this package are vulnerable to Directory Traversal via the process function. An attacker can access arbitrary files and obtain the first 10 bytes of their contents by supplying a crafted...

CVE-2026-65688

creationtimestamp| type| source ---|---|--- 2026-07-23 15:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrd4ckwn622k 2026-07-23 16:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrd7hshcma2g 2026-07-29 21:37:07+00:00| seen|...

CVE-2026-65687

creationtimestamp| type| source ---|---|--- 2026-07-23 15:02:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrd472v7uj2j 2026-07-23 17:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdcvfs6bk2m 2026-07-29 22:37:06+00:00| seen|...

CVE-2026-64813

creationtimestamp| type| source ---|---|--- 2026-07-23 14:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrd3xvfemu2e 2026-07-29 03:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrqx232sos2y...

CVE-2026-65550

creationtimestamp| type| source ---|---|--- 2026-07-23 14:38:48+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrd2vfxr2c24...

CVE-2026-65899

creationtimestamp| type| source ---|---|--- 2026-07-23 14:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-vxr8-fq34-vvx9...

Improper Verification of Source of a Communication Channel

Overview @auth/core is an Authentication for the Web. Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper binding of OAuth check cookies to the provider that created them. An attacker can gain unauthorized access to a victim'...

CVE-2026-15011

creationtimestamp| type| source ---|---|--- 2026-07-23 13:58:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcymksio42v...

MINI-QV3G-JJ47-H48Q

Bulletin has no description...

CVE-2026-65461

creationtimestamp| type| source ---|---|--- 2026-07-23 13:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvwrraod2v...

CVE-2026-65455

creationtimestamp| type| source ---|---|--- 2026-07-23 13:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvwqelee2v...

CVE-2026-61951

creationtimestamp| type| source ---|---|--- 2026-07-23 13:08:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvta62f32r...

CVE-2026-61950

creationtimestamp| type| source ---|---|--- 2026-07-23 13:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvt6qlqc2z...

CVE-2026-61949

creationtimestamp| type| source ---|---|--- 2026-07-23 13:06:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvpn7bac2s...

CVE-2026-61948

creationtimestamp| type| source ---|---|--- 2026-07-23 13:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvplomuv2j...

CVE-2026-59543

creationtimestamp| type| source ---|---|--- 2026-07-23 13:02:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvii4pva2q...

CVE-2026-59526

creationtimestamp| type| source ---|---|--- 2026-07-23 13:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvevrzyn2e...

CVE-2026-59525

creationtimestamp| type| source ---|---|--- 2026-07-23 13:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcveuesah2v...

CVE-2026-59514

creationtimestamp| type| source ---|---|--- 2026-07-23 12:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvbd3cpb2u...