CVE-2026-12535

creationtimestamp| type| source ---|---|--- 2026-07-13 17:26:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7lekcft2w...

CVE-2026-11909

creationtimestamp| type| source ---|---|--- 2026-07-13 17:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7lcy44r2f...

GHSA-RWCV-WHM8-FMXM

creationtimestamp| type| source ---|---|--- 2026-07-13 17:11:49+00:00| seen| https://gist.github.com/alon710/1cf437e22a892172012205a9b0e24d57...

CVE-2026-57799

creationtimestamp| type| source ---|---|--- 2026-07-13 16:00:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk2rka7sj26 2026-07-16 08:02:01+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrhgfzm22y...

PYSEC-2026-2543 kas's late signature validation may allow unnoticed repository manipulations

Impact So far, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the control of an attacker under very specific conditions. First of all, the attacker mus...

PYSEC-2026-2470 ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override

Summary fides.js is the script that renders Fides's consent banner on customer websites. It lets the embedding page override the banner's description text at runtime via a URL query parameter, a JavaScript global, or a cookie. On sites that have opted into HTML-formatted descriptions, the...

CVE-2026-59216

creationtimestamp| type| source ---|---|--- 2026-07-13 15:09:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjxwa6pxg2c 2026-07-16 08:01:21+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrgb6tvx2g 2026-07-24 18:35:08+00:00| published-proof-of-concept|...

PYSEC-2026-2436 Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations

Summary The DuckDB, Snowflake, BigQuery, and DeltaLake I/O managers constructed SQL WHERE clauses by interpolating dynamic partition key values into queries without escaping. A user with the Add Dynamic Partitions permission could create a partition key that injects arbitrary SQL, which would...

PYSEC-2026-2434 Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations

Summary The DuckDB, Snowflake, BigQuery, and DeltaLake I/O managers constructed SQL WHERE clauses by interpolating dynamic partition key values into queries without escaping. A user with the Add Dynamic Partitions permission could create a partition key that injects arbitrary SQL, which would...

CVE-2026-59215

creationtimestamp| type| source ---|---|--- 2026-07-13 14:45:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjwmojf6i2w 2026-07-16 08:01:04+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrfqpnso2p 2026-07-24 18:35:06+00:00| published-proof-of-concept|...

PYSEC-2026-3262 Segfault via invalid attributes in `pywrap_tfe_src.cc`

Impact If a list of quantized tensors is assigned to an attribute, the pywrap code fails to parse the tensor and returns a nullptr, which is not caught. An example can be seen in tf.compat.v1.extractvolumepatches by passing in quantized tensors as input ksizes. python import numpy as np import...

CVE-2026-61971

creationtimestamp| type| source ---|---|--- 2026-07-13 13:41:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjszxizpy2q 2026-07-13 21:32:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqknduvgfx2d 2026-07-14 02:49:10+00:00| seen|...

CVE-2026-9824

creationtimestamp| type| source ---|---|--- 2026-07-13 13:19:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjrszmrjk2s 2026-07-13 14:03:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjuaxgcny27 2026-07-13 18:19:38+00:00| seen|...

CVE-2026-4765

creationtimestamp| type| source ---|---|--- 2026-07-13 13:02:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjqucnozj2s 2026-07-13 14:17:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjv2ju4vn2t 2026-07-13 18:14:29+00:00| seen|...

GHSA-C7HR-448W-65PX

creationtimestamp| type| source ---|---|--- 2026-07-13 13:00:04+00:00| seen| https://t.me/poxek/6193 2026-07-14 00:00:48+00:00| published-proof-of-concept| https://t.me/poxek/6193...

CVE-2026-57805

creationtimestamp| type| source ---|---|--- 2026-07-13 12:34:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjpbecik52e...

CVE-2026-57816

creationtimestamp| type| source ---|---|--- 2026-07-13 12:09:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjnvukf5m2y 2026-07-13 21:31:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkncjxa5h2a 2026-07-14 02:26:29+00:00| seen|...

CVE-2026-61976

creationtimestamp| type| source ---|---|--- 2026-07-13 12:09:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjnulvaea2f 2026-07-13 13:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjswlvtwy2k 2026-07-13 15:44:34+00:00| seen|...

CVE-2026-61977

creationtimestamp| type| source ---|---|--- 2026-07-13 12:03:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjnl3rpau2y 2026-07-13 13:53:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjtovidza27 2026-07-14 02:38:39+00:00| seen|...

CVE-2026-61955

creationtimestamp| type| source ---|---|--- 2026-07-13 11:59:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjndygvcm2y 2026-07-13 18:04:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkbqk2co427 2026-07-14 02:02:07+00:00| seen|...