CVE-2026-16361

creationtimestamp| type| source ---|---|--- 2026-07-21 19:28:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6k4uz5j62u 2026-07-22 04:46:03+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 23:36:04+00:00| see...

CVE-2026-16454

creationtimestamp| type| source ---|---|--- 2026-07-21 19:15:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6jh27gnh2j...

EUVD-2026-42323

setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision NFC/NFD on macOS APFS/HFS+...

CVE-2026-15793

creationtimestamp| type| source ---|---|--- 2026-07-21 19:00:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6im6rly627...

GHSA-XCMW-GRXF-WJHJ

creationtimestamp| type| source ---|---|--- 2026-07-21 19:00:30+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mr6ilj3l562e...

CVE-2026-16439

creationtimestamp| type| source ---|---|--- 2026-07-21 18:51:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6i3ko2bf24...

Security Bulletin: Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI (CVE-2026-3157)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to information disclosure in mailbox UI. Vulnerability Details CVEID:CVE-2026-3157 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway is vulnerable to an information disclosure d...

CVE-2026-47409

creationtimestamp| type| source ---|---|--- 2026-07-21 18:44:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6houl2rk2q...

CVE-2026-47406

creationtimestamp| type| source ---|---|--- 2026-07-21 18:41:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6hjik73j2g...

CVE-2026-15792

creationtimestamp| type| source ---|---|--- 2026-07-21 18:38:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6hem5ttx2q...

CVE-2026-16451

creationtimestamp| type| source ---|---|--- 2026-07-21 18:36:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6ha4qrux24...

CVE-2026-24232

creationtimestamp| type| source ---|---|--- 2026-07-21 18:27:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gr6jdha2b...

CVE-2026-44907

creationtimestamp| type| source ---|---|--- 2026-07-21 18:26:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gnyyd4e2j...

CVE-2026-15829

creationtimestamp| type| source ---|---|--- 2026-07-21 18:24:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gkzbrpy2b...

CVE-2026-15789

creationtimestamp| type| source ---|---|--- 2026-07-21 18:22:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gi6jkll2g...

CVE-2026-15791

creationtimestamp| type| source ---|---|--- 2026-07-21 18:21:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gfi7b5t2i...

Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection through gitSourceHandler.checkoutAsBundle in source/git/bundle.go and getDefaultBranch in source/git/source.go. An attacker can trigger crafted host-side git command arguments by supplying a malicious Git...

CVE-2026-47410

creationtimestamp| type| source ---|---|--- 2026-07-21 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6djsm3uo2q 2026-07-21 19:10:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6j63qcax23...

CVE-2026-16493

The CVE-2026-16493 entry describes a command-injection vulnerability in ansible-core where _extract_collection_from_git() builds git clone commands without a proper end-of-options separator, allowing an attacker to craft a collection source URI that injects payloads during ansible-galaxy collecti...

CVE-2026-15793

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host...