akto v2.13.11

Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...

Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection through gitSourceHandler.checkoutAsBundle in source/git/bundle.go and getDefaultBranch in source/git/source.go. An attacker can trigger crafted host-side git command arguments by supplying a malicious Git...

CVE-2026-47410

creationtimestamp| type| source ---|---|--- 2026-07-21 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6djsm3uo2q 2026-07-21 19:10:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6j63qcax23...

CVE-2026-16493

The CVE-2026-16493 entry describes a command-injection vulnerability in ansible-core where _extract_collection_from_git() builds git clone commands without a proper end-of-options separator, allowing an attacker to craft a collection source URI that injects payloads during ansible-galaxy collecti...

Malicious code in pdf-converter-pro (PyPI)

Source: amazon-inspector 0b3a5f6d1d39c20feca11d0129f0efa21bdf564586045555b756cc25bce73efc Package is advertised as a PDF converter but contains no PDF generation code. Its sole public method TXTtoPDFConverter.createpdftxtpath, pdfpath is gated on the literal arguments 'file.txt' and 'file.pdf';...

Malicious code in music-source-separation (PyPI)

Source: kam193 a4aa4c5d893735fb71d4983056b6d254f087a4f5c82df6976e2efdab41f0c9f2 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the username to the package author. There is no other purpose...

Malicious code in gt-tester-exp-profiler-exp-00000015 (PyPI)

Source: amazon-inspector 55fc219f03cbaeeedb660ad423cc7af08ff1d29154c8b8989b7b0c5d7d5c3d75 setup.py installs a.pth file containing import gttesterexpprofilerexp00000015.probe; probe.runprobe, causing every Python interpreter start on the installer's machine to execute the package's probe module. T...

CVE-2026-15793

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host...

CVE-2026-15793

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host...

Malicious code in auth0-open-source-template (PyPI)

Source: kam193 c14dd94f3cdea34f9073f26be0716cfd944e0362396ae1dccab12196021a328c The package looks like a beginning for a further work. In fact, the uploader has shortly published a few similar packages appearing to be e.g. an integration for a known application, but containing only a "telemetry"...

CVE-2026-64825

creationtimestamp| type| source ---|---|--- 2026-07-21 16:42:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6atzcqtu2s...

CVE-2026-64824

creationtimestamp| type| source ---|---|--- 2026-07-21 16:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6atxxzj32y 2026-08-10 14:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97436 2026-08-11 00:00:07+00:00| published-proof-of-concept|...

CVE-2026-28317

creationtimestamp| type| source ---|---|--- 2026-07-21 16:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6aqfnokm2v 2026-07-21 17:02:37+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr6byq6dsr2o 2026-07-26 15:37:07+00:00| seen|...

CVE-2026-28316

creationtimestamp| type| source ---|---|--- 2026-07-21 16:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6amuchyj2a 2026-08-11 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mst7fejbrg2e...

CVE-2026-28314

creationtimestamp| type| source ---|---|--- 2026-07-21 16:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6amsva4r23 2026-07-26 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrkwayrphp26...

CVE-2026-16447

creationtimestamp| type| source ---|---|--- 2026-07-21 16:37:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mr6amohkrb2g...

cargo: Cargo: Source code overwrite due to symlink mishandling in third-party registries

A flaw was found in Cargo. When processing crate tarballs from third-party registries, Cargo mishandled symbolic links symlinks embedded within these archives. This vulnerability enables a malicious crate to overwrite the source code of another crate originating from the same registry. Such an...

CVE-2026-28313

creationtimestamp| type| source ---|---|--- 2026-07-21 16:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ajcpvl42q 2026-07-26 17:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrkuldwnwd2s...

CVE-2026-28312

creationtimestamp| type| source ---|---|--- 2026-07-21 16:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ajbif3b23 2026-07-26 16:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrksvpexrs23...

CVE-2026-28310

creationtimestamp| type| source ---|---|--- 2026-07-21 16:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6afpcpwm2q 2026-07-26 21:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrldo4thtn23...