CVE-2026-61692

creationtimestamp| type| source ---|---|--- 2026-07-13 17:32:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqk7woclfu2l...

CVE-2026-13236

creationtimestamp| type| source ---|---|--- 2026-07-13 17:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7w2sdkl2b 2026-07-21 04:45:08+00:00| seen| https://jvn.jp/en/jp/JVN20592637...

CVE-2026-13235

creationtimestamp| type| source ---|---|--- 2026-07-13 17:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7vzdsnp24...

CVE-2026-13233

creationtimestamp| type| source ---|---|--- 2026-07-13 17:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7sj363e2h 2026-07-22 17:00:05+00:00| seen| Telegram/q3tIaYx4agFM3da1rV7jtAQTpWs9uwXUcQ2UZM8hUpw4XQ 2026-07-22 17:00:05+00:00| seen|...

CVE-2026-13232

creationtimestamp| type| source ---|---|--- 2026-07-13 17:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7shm54u22...

CVE-2026-12535

creationtimestamp| type| source ---|---|--- 2026-07-13 17:26:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7lekcft2w...

CVE-2026-11909

creationtimestamp| type| source ---|---|--- 2026-07-13 17:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqk7lcy44r2f...

GHSA-RWCV-WHM8-FMXM

creationtimestamp| type| source ---|---|--- 2026-07-13 17:11:49+00:00| seen| https://gist.github.com/alon710/1cf437e22a892172012205a9b0e24d57...

CVE-2026-57799

creationtimestamp| type| source ---|---|--- 2026-07-13 16:00:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk2rka7sj26 2026-07-16 08:02:01+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrhgfzm22y...

PYSEC-2026-2543 kas's late signature validation may allow unnoticed repository manipulations

Impact So far, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the control of an attacker under very specific conditions. First of all, the attacker mus...

PYSEC-2026-2470 ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override

Summary fides.js is the script that renders Fides's consent banner on customer websites. It lets the embedding page override the banner's description text at runtime via a URL query parameter, a JavaScript global, or a cookie. On sites that have opted into HTML-formatted descriptions, the...

airbyte-source-file (>=0.3.15, <=0.5.39), airbyte-source-sftp-bulk (0.1.2) +32 more potentially affected by CVE-2026-44405 via paramiko (2.11.0)

paramiko PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - airbyte-source-file =0.3.15, =1.0.21, =1.0.1, =0.1.0, =0.0.5, =1.0.10, =2.5.2, =0.0.0.8.1, =0.0.1, =0.0.1, =2.0.0, =0.0.1a0, =0.0.1b0 and more...

CVE-2026-59216

creationtimestamp| type| source ---|---|--- 2026-07-13 15:09:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjxwa6pxg2c 2026-07-16 08:01:21+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrgb6tvx2g 2026-07-24 18:35:08+00:00| published-proof-of-concept|...

PYSEC-2026-2436 Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations

Summary The DuckDB, Snowflake, BigQuery, and DeltaLake I/O managers constructed SQL WHERE clauses by interpolating dynamic partition key values into queries without escaping. A user with the Add Dynamic Partitions permission could create a partition key that injects arbitrary SQL, which would...

PYSEC-2026-2434 Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations

Summary The DuckDB, Snowflake, BigQuery, and DeltaLake I/O managers constructed SQL WHERE clauses by interpolating dynamic partition key values into queries without escaping. A user with the Add Dynamic Partitions permission could create a partition key that injects arbitrary SQL, which would...

CVE-2026-59215

creationtimestamp| type| source ---|---|--- 2026-07-13 14:45:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjwmojf6i2w 2026-07-16 08:01:04+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrfqpnso2p 2026-07-24 18:35:06+00:00| published-proof-of-concept|...

PYSEC-2026-3262 Segfault via invalid attributes in `pywrap_tfe_src.cc`

Impact If a list of quantized tensors is assigned to an attribute, the pywrap code fails to parse the tensor and returns a nullptr, which is not caught. An example can be seen in tf.compat.v1.extractvolumepatches by passing in quantized tensors as input ksizes. python import numpy as np import...

CVE-2026-61971

creationtimestamp| type| source ---|---|--- 2026-07-13 13:41:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjszxizpy2q 2026-07-13 21:32:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqknduvgfx2d 2026-07-14 02:49:10+00:00| seen|...

CVE-2026-9824

creationtimestamp| type| source ---|---|--- 2026-07-13 13:19:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjrszmrjk2s 2026-07-13 14:03:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjuaxgcny27 2026-07-13 18:19:38+00:00| seen|...

CVE-2026-4765

creationtimestamp| type| source ---|---|--- 2026-07-13 13:02:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjqucnozj2s 2026-07-13 14:17:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjv2ju4vn2t 2026-07-13 18:14:29+00:00| seen|...